Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


19 November 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
1e3cef226f
[Firefox:16 hits: 11-04 to 11-18]		 none[none] WinXP 35 of 36 20:21:24 20:21:47 2 none none:none
 none|none none none
a917b38976
[Firefox:10 hits: 10-14 to 11-18]		 none[none] WinXP 35 of 36 10:27:39 10:27:39 1 none none:none
 none|none none none
235d9f7aba
NEW		 none[none] Win2K-f 33 of 36 00:48:23 00:48:23 1 none none:none
 none|none none none
53bfe15e91
[Firefox:4037 hits: 06-17 to 11-18]
73f1082158
[Firefox:2004 hits: 06-18 to 11-18]		 none[4]
73f1082158[1]		 Win2K-f
WinXP		 0 of 32 00:16:12 20:35:37 17 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
393f45ca33
NEW		 none[none] WinXP 35 of 36 09:48:54 09:48:54 1 none none:none
 none|none none none
bea8cb1865
[Firefox:41 hits: 08-11 to 11-13]
fac78fde16
[Firefox:20 hits: 09-13 to 11-13]		 none[none]
none [none]		 Win2K-f
WinXP		 35 of 36 08:44:25 09:04:06 2 none none:none
none:none
 none|none
none|none		 none
none		 none
none
53bfe15e91
[Firefox:4037 hits: 06-17 to 11-18]		 none[4] Win2K-f
WinXP		 33 of 33 00:09:22 23:21:56 37 none none:none
 tElock| none trace
6d30ad4b30
NEW		 none[none] WinXP 35 of 36 09:46:34 09:46:34 1 none none:none
 none|none none none
d4eed7b000
[Firefox: 9 hits: 11-03 to 11-16]		 none[none] WinXP 34 of 36 05:42:19 05:42:19 1 none none:none
 none|none none none
87e1117f2a
[Firefox:34 hits: 07-18 to 11-18]		 none[none] Win2K-f 32 of 33 17:01:20 17:01:20 1 none none:none
 none|none none none
4ed6926c35
NEW		 none[none] WinXP 35 of 36 03:48:22 03:48:22 1 none none:none
 none|none none none
959f56f218
[Firefox: 2 hits: 11-10 to 11-15]		 none[none] WinXP 35 of 36 21:45:00 21:45:00 1 none none:none
 none|none none none
06a5e31b47
[Firefox:16 hits: 10-28 to 11-18]		 none[none] WinXP 35 of 36 14:51:15 14:51:15 1 none none:none
 none|none none none
53bfe15e91
[Firefox:4037 hits: 06-17 to 11-18]
b7082104e4
[Firefox:271 hits: 06-18 to 11-16]		 none[4]
none [4]		 Win2K-f
WinXP		 8 of 33 11:29:54 23:01:32 5 none none:none
none:none
 tElock|
tElock|		 none
none		 trace
trace
7f89b38665
[Firefox:39 hits: 08-02 to 11-15]		 none[none] WinXP 32 of 36 00:27:42 00:27:42 1 none none:none
 none|none none none
7c2b50c774
[Firefox:53 hits: 08-01 to 11-16]		 none[none] WinXP 25 of 36 02:44:24 02:44:24 1 none none:none
 none|none none none
a5fb35c9fd
[Firefox: 2 hits: 11-08 to 11-14]		 none[none] WinXP 35 of 36 05:52:38 05:52:38 1 none none:none
 none|none none none
235d9f7aba
NEW
28d72b163a
NEW		 none[none]
none [none]		 Win2K-f 34 of 36 00:48:23 00:48:23 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
168aab35a3
[Firefox:192 hits: 06-17 to 11-16]		 none[4] WinXP 31 of 33 21:29:47 21:29:47 1 none none:none
 tElock| none trace
b23ffca78e
[Firefox: 8 hits: 10-24 to 11-08]		 none[none] WinXP 34 of 36 12:15:05 20:31:00 3 none none:none
 none|none none none
2a69469df0
NEW
3811e2648d
NEW		 none[none]
none [none]		 Win2K-f 9 of 36 19:44:45 19:44:45 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
73ce2b74da
[Firefox:37 hits: 06-18 to 11-16]		 73ce2b74da [1] Win2K-f 3 of 33 11:10:32 11:10:32 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
a12cab51ef
[Firefox:398 hits: 04-01 to 11-18]		 40f7f463c4 [0] WinXP 29 of 29 04:33:23 21:10:51 5 none ASM:Graph
 ASPack| 54% lines=281
embedded dns		 trace
b52d214d08
[Firefox:61 hits: 10-05 to 11-18]		 none[none] WinXP 35 of 36 14:45:18 14:45:18 1 none none:none
 none|none none none
9b56e15e90
NEW		 none[none] Win2K-f 7 of 36 13:09:06 13:09:06 1 none none:none
 none|none none none
03f912899b
[Firefox:202 hits: 04-16 to 11-14]		 83893bd25d [0] WinXP 32 of 32 07:14:52 07:27:20 2 none ASM:Graph
 none|none 100% lines=65 trace
76882741df
NEW
9eaad40916
NEW		 none[none]
none [none]		 Win2K-f 33 of 36 07:42:53 07:42:53 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
3af3cf0742
NEW		 none[none] Win2K-f 33 of 36 12:42:48 12:42:48 1 none none:none
 none|none none none
017f3b2704
[Firefox: 6 hits: 10-26 to 11-15]
752d7e4cf2
NEW
9ffd4ae260
NEW		 none[none]
none [none]
none [none]		 WinXP 16 of 36 02:40:05 02:40:05 1 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
168aab35a3
[Firefox:192 hits: 06-17 to 11-16]
667f0c59f3
[Firefox:34 hits: 07-04 to 11-16]		 none[4]
none [none]		 WinXP 31 of 33 21:29:47 21:29:47 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
741e3b03b3
[Firefox:551 hits: 04-15 to 11-18]		 e0197e8a64 [0] WinXP 31 of 32 06:01:10 06:01:10 1 none ASM:Graph
 none|none 100% lines=62 trace
cbaf7255c4
NEW		 none[none] WinXP 34 of 36 04:54:40 04:54:40 1 none none:none
 none|none none none
017f3b2704
[Firefox: 6 hits: 10-26 to 11-15]
752d7e4cf2
NEW		 none[none]
none [none]		 WinXP 11 of 36 02:40:05 02:40:05 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
b3a9397884
NEW		 none[none] WinXP 34 of 36 18:31:23 18:31:23 1 none none:none
 none|none none none
c702a34315
NEW		 none[none] WinXP 34 of 36 13:45:54 13:45:54 1 none none:none
 none|none none none
bea8cb1865
[Firefox:41 hits: 08-11 to 11-13]		 none[none] Win2K-f
WinXP		 32 of 36 03:57:10 09:04:06 3 none none:none
 none|none none none
831f4ee0a7
[Firefox:490 hits: 04-01 to 11-18]		 eb7546c600 [0] WinXP 29 of 29 04:19:55 05:39:03 2 none ASM:Graph
 none|none 100% lines=61 trace
79ea93560b
NEW		 none[none] Win2K-f 33 of 36 16:05:54 16:05:54 1 none none:none
 none|none none none
4a4dd1c72f
NEW		 none[none] WinXP 34 of 36 11:53:22 11:53:22 1 none none:none
 none|none none none
afcc1ca373
[Firefox: 2 hits: 11-15 to 11-15]		 none[none] WinXP 35 of 36 09:10:21 14:50:58 3 none none:none
 none|none none none
76882741df
NEW		 none[none] Win2K-f 34 of 36 07:42:53 07:42:53 1 none none:none
 none|none none none
78e0e5546a
NEW		 none[none] WinXP 35 of 36 06:29:24 06:29:24 1 none none:none
 none|none none none
17028f1eda
[Firefox:59 hits: 04-18 to 11-18]		 none[3] WinXP 31 of 32 09:54:15 19:46:09 3 none none:none
 tElock| none trace
3ea3e1ad41
NEW		 none[none] Win2K-f 32 of 36 02:25:02 02:25:02 1 none none:none
 none|none none none
7fd7475c63
[Firefox:23 hits: 10-29 to 11-15]		 none[none] WinXP 35 of 36 22:41:24 22:41:24 1 none none:none
 none|none none none
57ce4acac2
[Firefox:356 hits: 06-17 to 11-18]		 57ce4acac2 [1] Win2K-f
WinXP		 0 of 33 01:33:24 23:49:27 8 none ASM:Graph
 Armadillo| 47% lines=81 trace
1a2c0e6130
[Firefox:437 hits: 12-31 to 11-18]		 048df78048 [0] WinXP 29 of 29 07:55:00 19:54:56 2 none ASM:Graph
 none|none 100% lines=61 trace
53bfe15e91
[Firefox:4037 hits: 06-17 to 11-18]
a08f3b74a4
[Firefox:1447 hits: 06-18 to 11-18]		 none[4]
a08f3b74a4[1]		 Win2K-f
WinXP		 0 of 33 00:09:22 23:21:56 10 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
0a351b0b88
[Firefox: 2 hits: 11-14 to 11-14]		 none[none] WinXP 34 of 36 09:29:32 09:29:32 1 none none:none
 none|none none none
163daa6b71
[Firefox: 2 hits: 10-26 to 11-04]		 none[none] WinXP 35 of 36 15:29:30 15:29:30 1 none none:none
 none|none none none
b872c76081
[Firefox:89 hits: 09-13 to 11-16]		 none[none] WinXP 36 of 36 03:39:43 21:00:32 5 none none:none
 none|none none none
7f89b38665
[Firefox:39 hits: 08-02 to 11-15]
a51a50404e
[Firefox:39 hits: 08-02 to 11-15]		 none[none]
none [none]		 WinXP 34 of 36 00:27:42 00:27:42 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
76a3db32a0
NEW		 none[none] WinXP 35 of 36 15:20:31 15:20:31 1 none none:none
 none|none none none
53bfe15e91
[Firefox:4037 hits: 06-17 to 11-18]
6d499bc718
NEW		 none[4]
none [none]		 Win2K-f 32 of 36 10:07:43 10:07:43 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
a0139d7ad8
[Firefox:181 hits: 04-10 to 11-18]		 d9e9662db1 [0] WinXP 29 of 29 00:21:58 14:42:10 6 none ASM:Graph
 PolyEnE| 99% lines=68 trace
87e1117f2a
[Firefox:34 hits: 07-18 to 11-18]
b4fe4581c3
[Firefox:34 hits: 07-18 to 11-18]		 none[none]
none [none]		 Win2K-f 29 of 33 17:01:20 17:01:20 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
41b9df60db
[Firefox:11 hits: 11-03 to 11-18]
9172512894
NEW
cada8d5adf
[Firefox:10 hits: 11-03 to 11-18]		 none[none]
none [none]
none [none]		 Win2K-f
WinXP		 15 of 36 03:33:12 15:23:52 2 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
fcd4bae1af
[Firefox: 6 hits: 10-27 to 11-18]		 none[none] WinXP 34 of 36 09:28:16 09:28:16 1 none none:none
 none|none none none
2a69469df0
NEW		 none[none] Win2K-f 32 of 36 19:44:45 19:44:45 1 none none:none
 none|none none none
e3ce8985e6
[Firefox: 2 hits: 07-14 to 09-19]		 3762d19d64 [0] WinXP 31 of 32 10:02:21 10:02:21 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
607b60ad51
[Firefox:47 hits: 06-20 to 11-15]
e5c7bce70e
[Firefox:45 hits: 06-20 to 11-15]		 none[4]
e5c7bce70e[1]		 Win2K-f 2 of 32 21:22:45 21:22:45 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
6d7baa9138
[Firefox: 6 hits: 10-29 to 11-13]		 none[none] WinXP 34 of 36 07:50:12 07:50:12 1 none none:none
 none|none none none
2c0902a088
[Firefox: 4 hits: 11-12 to 11-18]
435638f87d
[Firefox: 4 hits: 11-12 to 11-18]		 none[none]
none [none]		 Win2K-f 7 of 36 16:58:10 16:58:10 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
df17a625ee
[Firefox:231 hits: 04-06 to 11-16]		 9bbdd086c5 [0] WinXP 29 of 29 13:43:55 13:43:55 1 none ASM:Graph
 ASPack| 49% lines=186
embedded dns		 trace
2c0902a088
[Firefox: 4 hits: 11-12 to 11-18]		 none[none] Win2K-f 6 of 36 16:58:10 16:58:10 1 none none:none
 none|none none none
1cc50efd1f
[Firefox: 3 hits: 11-12 to 11-16]		 none[none] WinXP 35 of 36 23:10:56 23:10:56 1 none none:none
 none|none none none
ebdd3dbbb8
NEW		 none[none] WinXP 35 of 36 14:07:15 14:07:15 1 none none:none
 none|none none none
02fc26757d
NEW		 none[none] WinXP 31 of 36 01:46:08 01:46:08 1 none none:none
 none|none none none
93a84a5dba
[Firefox: 8 hits: 10-26 to 11-09]		 none[none] WinXP 33 of 35 23:58:11 23:58:15 2 none none:none
 none|none none none
02fc26757d
NEW
9f5880bc0f
NEW		 none[none]
none [none]		 WinXP 33 of 36 01:46:08 01:46:08 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
a8d74af6d5
[Firefox: 6 hits: 10-04 to 11-14]		 none[none] WinXP 35 of 36 07:25:13 07:25:13 1 none none:none
 none|none none none
017f3b2704
[Firefox: 6 hits: 10-26 to 11-15]		 none[none] WinXP 34 of 35 02:40:05 02:40:05 1 none none:none
 none|none none none
17606f84ff
[Firefox: 2 hits: 11-15 to 11-16]		 none[none] WinXP 34 of 36 10:59:39 11:00:03 2 none none:none
 none|none none none
6b3beaea1a
[Firefox:37 hits: 10-21 to 11-18]		 none[none] WinXP 35 of 36 05:56:36 10:28:23 4 none none:none
 none|none none none
cb6f0707a6
NEW		 none[none] WinXP 34 of 36 17:25:36 17:25:36 1 none none:none
 none|none none none
18be09780e
NEW		 none[none] WinXP 35 of 36 23:48:57 23:48:57 1 none none:none
 none|none none none
5818023061
[Firefox: 6 hits: 04-01 to 11-18]		 a227e5e49d [0] WinXP 32 of 32 03:37:35 03:38:28 2 none ASM:Graph
 PolyEnE| 99% lines=68 trace
ca47a36342
[Firefox:34 hits: 05-29 to 11-14]		 c3a58f69c6 [0] WinXP 26 of 28 17:00:59 17:00:59 1 none ASM:Graph
 PolyEnE| 100% lines=89
embedded dns		 trace
fe22b8315f
[Firefox:15 hits: 06-19 to 11-18]		 none[4] WinXP 32 of 33 15:26:06 15:26:06 1 none none:none
 StarForce| none trace
79ea93560b
NEW
992801cfb9
NEW		 none[none]
none [none]		 Win2K-f 34 of 36 16:05:54 16:05:54 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
3cd7958258
[Firefox:38 hits: 06-17 to 11-13]		 none[4] WinXP 30 of 33 22:41:44 22:41:44 1 none none:none
 tElock| none trace
413c9ac28b
[Firefox:20 hits: 09-26 to 11-16]		 none[none] Win2K-f 33 of 36 13:53:24 20:53:45 2 none none:none
 none|none none none
7f60162c2c
[Firefox:758 hits: 12-31 to 11-18]		 1aad8e4632 [0] WinXP 25 of 25 00:59:41 16:20:00 4 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
09b95b77d7
[Firefox: 2 hits: 10-27 to 11-15]		 none[none] WinXP 35 of 36 17:15:03 17:15:03 1 none none:none
 none|none none none
e9ee0d4d34
[Firefox: 6 hits: 09-15 to 11-12]		 none[none] WinXP 24 of 36 20:12:34 20:12:34 1 none none:none
 none|none none none
24e4c28fdb
[Firefox:11 hits: 10-25 to 11-16]		 none[none] WinXP 34 of 35 03:55:42 03:55:42 1 none none:none
 none|none none none
41b9df60db
[Firefox:11 hits: 11-03 to 11-18]
954a98c971
[Firefox:12 hits: 06-09 to 11-03]		 none[none]
none [4]		 Win2K-f 31 of 33 03:33:12 03:33:12 1 none none:none
none:none
 none|none
FSG|		 none
none		 none
trace
9b56e15e90
NEW
fb8f82fcb3
[Firefox:34 hits: 10-24 to 11-15]		 none[none]
none [none]		 WinXP
Win2K-f		 11 of 36 02:40:05 13:09:06 3 none none:none
none:none
 none|none
none|none		 none
none		 none
none
2d815d2be3
[Firefox: 8 hits: 09-25 to 11-13]		 none[none] WinXP 34 of 36 16:32:42 16:32:42 1 none none:none
 none|none none none
632e315db2
[Firefox:42 hits: 10-03 to 11-15]		 none[none] WinXP 35 of 36 12:32:14 12:32:14 1 none none:none
 none|none none none
e604210b1a
[Firefox: 3 hits: 11-13 to 11-16]		 none[none] WinXP 34 of 35 05:03:43 05:03:43 1 none none:none
 none|none none none
3cd7958258
[Firefox:38 hits: 06-17 to 11-13]
41efedf70f
[Firefox:36 hits: 06-19 to 11-05]		 none[4]
41efedf70f[1]		 WinXP 28 of 32 22:41:44 22:41:44 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
41b9df60db
[Firefox:11 hits: 11-03 to 11-18]		 none[none] Win2K-f
WinXP		 21 of 36 03:33:12 15:23:52 2 none none:none
 none|none none none
15093b4cc0
[Firefox:12 hits: 11-09 to 11-15]		 none[none] WinXP 35 of 36 04:13:17 17:11:01 2 none none:none
 none|none none none
ed3d72ab3c
NEW		 none[none] WinXP 34 of 36 18:40:41 18:40:41 1 none none:none
 none|none none none
41b9df60db
[Firefox:11 hits: 11-03 to 11-18]
9172512894
NEW		 none[none]
none [none]		 WinXP 33 of 36 15:23:52 15:23:52 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
7d99b0e910
[Firefox:1121 hits: 12-31 to 11-18]		 7a70e1b592 [0] WinXP 26 of 28 02:12:59 17:20:52 10 none ASM:Graph
 PolyEnE| 99% lines=68 trace
73ce2b74da
[Firefox:37 hits: 06-18 to 11-16]
79c01ec060
[Firefox:81 hits: 06-18 to 11-16]		 73ce2b74da [1]
none [4]		 Win2K-f 33 of 33 11:10:32 11:10:32 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=81
none		 trace
trace
7e8bfa9b49
[Firefox:40 hits: 10-01 to 11-15]		 none[none] WinXP 35 of 36 13:17:01 13:17:01 1 none none:none
 none|none none none
df1392205b
NEW		 none[none] WinXP 34 of 36 07:46:40 07:46:40 1 none none:none
 none|none none none
ff109f2a5f
NEW		 none[none] WinXP 35 of 36 15:31:22 15:31:46 2 none none:none
 none|none none none
b27d73bfcb
[Firefox:60 hits: 10-10 to 11-18]		 none[none] WinXP 35 of 36 05:37:26 16:41:28 4 none none:none
 none|none none none
d20f157117
NEW		 none[none] WinXP 34 of 34 21:36:41 21:36:41 1 none none:none
 none|none none none
78e0e5546a
NEW
bd4f870a47
NEW		 none[none]
none [none]		 WinXP 0 of 36 06:29:24 06:29:24 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
607b60ad51
[Firefox:47 hits: 06-20 to 11-15]		 none[4] Win2K-f 31 of 32 21:22:45 21:22:45 1 none none:none
 tElock| none trace
ec470f944a
NEW		 none[none] WinXP 34 of 36 08:38:13 08:38:13 1 none none:none
 none|none none none
430b442da3
[Firefox: 4 hits: 10-10 to 10-30]		 none[none] Win2K-f 35 of 36 03:57:10 03:57:10 1 none none:none
 none|none none none
03ef8570ff
NEW		 none[none] WinXP 34 of 36 09:58:38 09:58:38 1 none none:none
 none|none none none
9bb68450cd
[Firefox:18 hits: 10-26 to 11-16]		 none[none] WinXP 34 of 36 03:18:13 18:23:30 3 none none:none
 none|none none none
995f3b198b
NEW		 none[none] Win2K-f 23 of 36 01:34:21 01:34:21 1 none none:none
 none|none none none