Multiperspective Malware Analysis Page - Daily Malware Binary Digest Summary

Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page

20 November 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.

Packed
MD5 UnPacket
MD5 Victim
OS AntiVirus
Hit-Cnt First
Encounter Last
Encounter Freq
Cnt Behavioral
Clusters Unpacked
Egg.asm Packer
Fingerprint API
Resolution String
Cnt Syscall
Trace

63f13fe223
[Firefox: 3 hits: 10-28 to 11-15] none[none] WinXP 34 of 36 04:41:58 04:41:58 1 none none:none
none|none none none

da00a8e7a1
[Firefox:37 hits: 08-05 to 11-18]
f685f8e027
[Firefox:41 hits: 06-18 to 11-18] none[none]
f685f8e027[1] Win2K-f 28 of 33 15:17:01 15:17:01 1 none none:none
ASM:Graph
none|none
Armadillo| 48% none
lines=82 none
trace

73f1082158
[Firefox:2021 hits: 06-18 to 11-19] 73f1082158 [1] Win2K-f
WinXP 0 of 32 01:38:10 18:28:56 13 none ASM:Graph
Armadillo| 47% lines=81 trace

52e18deb92
NEW none[none] WinXP 36 of 37 15:49:36 15:49:36 1 none none:none
none|none none none

28ce5fc467
[Firefox:10 hits: 09-12 to 11-16]
e7335cb667
[Firefox:10 hits: 09-12 to 11-16] none[none]
none [none] Win2K-f 33 of 36 15:47:55 15:47:55 1 none none:none
none:none
none|none
none|none none
none none
none

393f45ca33
[Firefox: 2 hits: 10-14 to 11-19] none[none] WinXP 35 of 36 20:42:50 20:42:50 1 none none:none
none|none none none

632ca807a6
[Firefox: 2 hits: 11-07 to 11-14] none[none] WinXP 32 of 36 02:09:29 02:09:29 1 none none:none
none|none none none

53bfe15e91
[Firefox:4074 hits: 06-17 to 11-19] none[4] Win2K-f
WinXP 33 of 33 01:00:02 18:09:39 22 none none:none
tElock| none trace

3c6ddce3c6
NEW none[none] Win2K-f 35 of 37 05:56:30 05:56:30 1 none none:none
none|none none none

8055e4589d
[Firefox: 2 hits: 11-14 to 11-16] none[none] WinXP 34 of 36 16:29:18 16:29:18 1 none none:none
none|none none none

bb7681eca8
[Firefox:16 hits: 09-26 to 11-13] none[none] WinXP 32 of 32 07:50:10 16:58:18 5 none none:none
none|none none none

2624cc4502
NEW
61357c03eb
NEW none[none]
none [none] WinXP 31 of 36 16:20:43 16:20:43 1 none none:none
none:none
none|none
none|none none
none none
none

a96b94fdb6
NEW none[none] WinXP 35 of 36 09:58:35 09:59:19 2 none none:none
none|none none none

4a4d8f51ca
NEW none[none] Win2K-f 2 of 36 19:25:40 19:25:40 1 none none:none
none|none none none

25ce229a94
NEW none[none] WinXP 35 of 37 14:45:56 14:45:56 1 none none:none
none|none none none

69be040d0b
[Firefox:10 hits: 06-21 to 11-12] none[4] Win2K-f 30 of 33 02:36:54 02:36:54 1 none none:none
tElock| none trace

2624cc4502
NEW none[none] WinXP 34 of 36 16:20:43 16:20:43 1 none none:none
none|none none none

4840d5ef28
NEW none[none] WinXP 35 of 36 15:10:09 15:10:09 1 none none:none
none|none none none

a7cc6e6776
NEW none[none] WinXP 35 of 37 08:00:49 08:00:49 1 none none:none
none|none none none

69be040d0b
[Firefox:10 hits: 06-21 to 11-12]
81bbbeac34
[Firefox:10 hits: 06-21 to 11-12] none[4]
81bbbeac34[1] Win2K-f 30 of 33 02:36:54 02:36:54 1 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=82 trace
trace

a5fb35c9fd
[Firefox: 3 hits: 11-08 to 11-19] none[none] WinXP 35 of 36 06:23:52 06:23:52 1 none none:none
none|none none none

9f8588ffb3
NEW none[none] Win2K-f 0 of 37 20:59:23 20:59:23 1 none none:none
none|none none none

31da6d04d1
NEW
c982c0cc3c
NEW none[none]
none [none] Win2K-f 0 of 37 19:02:36 19:02:36 1 none none:none
none:none
none|none
none|none none
none none
none

168aab35a3
[Firefox:193 hits: 06-17 to 11-19] none[4] Win2K-f
WinXP 31 of 33 05:45:46 15:33:10 2 none none:none
tElock| none trace

c227716af1
NEW none[none] WinXP 35 of 36 05:30:47 05:30:47 1 none none:none
none|none none none

533d15b5ce
[Firefox:48 hits: 06-21 to 11-18] none[4] WinXP 30 of 33 04:01:19 04:01:19 1 none none:none
tElock| none trace

3060fff5c0
[Firefox: 6 hits: 08-22 to 11-04]
a7d11d75cd
[Firefox: 6 hits: 08-22 to 11-04] none[none]
none [none] WinXP 34 of 36 02:00:22 02:00:22 1 none none:none
none:none
none|none
none|none none
none none
none

289d74b4ce
[Firefox:18 hits: 11-03 to 11-18] none[none] WinXP 35 of 36 07:01:10 07:01:10 1 none none:none
none|none none none

03f912899b
[Firefox:204 hits: 04-16 to 11-19] 83893bd25d [0] WinXP 32 of 32 04:38:47 18:57:18 3 none ASM:Graph
none|none 100% lines=65 trace

31da6d04d1
NEW none[none] Win2K-f 0 of 37 19:02:36 19:02:36 1 none none:none
none|none none none

f362a30ef0
NEW none[none] WinXP 35 of 37 07:24:58 07:24:58 1 none none:none
none|none none none

632ca807a6
[Firefox: 2 hits: 11-07 to 11-14]
9c2207ef84
[Firefox: 2 hits: 11-07 to 11-14] none[none]
none [none] WinXP 34 of 36 02:09:29 02:09:29 1 none none:none
none:none
none|none
none|none none
none none
none

4c3df24b32
[Firefox:251 hits: 06-17 to 11-18] 4c3df24b32 [1] Win2K-f 0 of 33 05:45:46 08:02:26 2 none ASM:Graph
Armadillo| 47% lines=81 trace

741e3b03b3
[Firefox:552 hits: 04-15 to 11-19] e0197e8a64 [0] WinXP 31 of 32 06:05:37 16:54:52 4 none ASM:Graph
none|none 100% lines=62 trace

73f1082158
[Firefox:2021 hits: 06-18 to 11-19]
752d7e4cf2
NEW 73f1082158 [1]
none [none] Win2K-f 11 of 36 01:38:10 01:38:10 1 none ASM:Graph
none:none
Armadillo|
none|none lines=81
none trace
none

9028d79f7a
NEW none[none] Win2K-f 0 of 36 20:37:36 20:37:36 1 none none:none
none|none none none

73f1082158
[Firefox:2021 hits: 06-18 to 11-19]
752d7e4cf2
NEW
8ceee5cf8e
NEW 73f1082158 [1]
none [none]
none [none] Win2K-f 8 of 36 01:38:10 01:38:10 1 none ASM:Graph
none:none
none:none
Armadillo|
none|none
none|none lines=81
none
none trace
none
none

b1c85cee4b
[Firefox:40 hits: 10-27 to 11-15] none[none] WinXP 34 of 36 08:19:38 08:20:01 2 none none:none
none|none none none

831f4ee0a7
[Firefox:492 hits: 04-01 to 11-19] eb7546c600 [0] WinXP 29 of 29 01:17:21 06:12:23 2 none ASM:Graph
none|none 100% lines=61 trace

4a4dd1c72f
NEW none[none] WinXP 34 of 36 12:18:01 12:18:01 1 none none:none
none|none none none

533d15b5ce
[Firefox:48 hits: 06-21 to 11-18]
58c343a8d8
[Firefox:52 hits: 06-21 to 11-18] none[4]
58c343a8d8[1] WinXP 28 of 33 04:01:19 04:01:19 1 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=82 trace
trace

41b9df60db
[Firefox:13 hits: 11-03 to 11-19]
cada8d5adf
[Firefox:12 hits: 11-03 to 11-19]
cf860c219a
NEW none[none]
none [none]
none [none] WinXP 34 of 36 07:54:49 07:54:49 1 none none:none
none:none
none:none
none|none
none|none
none|none none
none
none none
none
none

17028f1eda
[Firefox:62 hits: 04-18 to 11-19] none[3] WinXP 31 of 32 12:37:27 14:32:27 3 none none:none
tElock| none trace

6f809ffa84
NEW none[none] Win2K-f 0 of 37 17:52:01 20:30:50 34 none none:none
none|none none none

1a2c0e6130
[Firefox:439 hits: 12-31 to 11-19] 048df78048 [0] WinXP 29 of 29 09:12:45 19:23:46 2 none ASM:Graph
none|none 100% lines=61 trace

4ca3056804
[Firefox:11 hits: 06-18 to 11-01] 4ca3056804 [1] Win2K-f 1 of 33 01:00:02 01:00:02 1 none ASM:Graph
Armadillo| 47% lines=81 trace

53bfe15e91
[Firefox:4074 hits: 06-17 to 11-19]
a08f3b74a4
[Firefox:1457 hits: 06-18 to 11-19] none[4]
a08f3b74a4[1] Win2K-f
WinXP 0 of 33 03:31:23 17:05:45 9 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=81 trace
trace

0a351b0b88
[Firefox: 3 hits: 11-14 to 11-19] none[none] WinXP 34 of 36 04:19:22 04:19:22 1 none none:none
none|none none none

163daa6b71
[Firefox: 3 hits: 10-26 to 11-19] none[none] WinXP 35 of 36 13:40:23 13:40:23 1 none none:none
none|none none none

0c01728b7e
[Firefox: 4 hits: 08-30 to 09-30] none[none] Win2K-f 36 of 36 01:42:43 01:42:43 1 none none:none
none|none none none

a0139d7ad8
[Firefox:187 hits: 04-10 to 11-19] d9e9662db1 [0] WinXP 29 of 29 07:47:07 14:06:04 4 none ASM:Graph
PolyEnE| 99% lines=68 trace

3c6ddce3c6
NEW
aee0728366
NEW none[none]
none [none] Win2K-f 33 of 37 05:56:30 05:56:30 1 none none:none
none:none
none|none
none|none none
none none
none

41b9df60db
[Firefox:13 hits: 11-03 to 11-19]
cada8d5adf
[Firefox:12 hits: 11-03 to 11-19] none[none]
none [none] WinXP 15 of 36 07:54:49 07:54:49 1 none none:none
none:none
none|none
none|none none
none none
none

6c57000ae5
NEW none[none] WinXP 34 of 37 18:44:25 18:44:25 1 none none:none
none|none none none

f44bfbc34e
NEW none[none] WinXP 36 of 37 02:24:03 02:24:03 1 none none:none
none|none none none

d85caa614c
NEW none[none] WinXP 35 of 37 04:28:27 04:28:51 2 none none:none
none|none none none

9e9244a382
[Firefox: 2 hits: 11-14 to 11-16]
d518b500dd
[Firefox: 2 hits: 11-14 to 11-16] none[none]
none [none] Win2K-f 31 of 36 07:24:34 07:24:34 1 none none:none
none:none
none|none
none|none none
none none
none

07fabc79ef
[Firefox:26 hits: 06-19 to 11-12] 07fabc79ef [1] Win2K-f 0 of 32 15:14:15 15:14:15 1 none ASM:Graph
Armadillo| 47% lines=81 trace

428ae15458
[Firefox:27 hits: 10-14 to 11-18] none[none] WinXP 35 of 36 07:17:37 10:29:50 2 none none:none
none|none none none

df17a625ee
[Firefox:232 hits: 04-06 to 11-19] 9bbdd086c5 [0] WinXP 29 of 29 17:53:48 17:53:48 1 none ASM:Graph
ASPack| 49% lines=186
embedded dns trace

3a586cce7d
NEW none[none] WinXP 36 of 37 14:22:15 14:22:40 2 none none:none
none|none none none

7d2fc28337
NEW none[none] WinXP 36 of 37 14:09:05 14:09:05 1 none none:none
none|none none none

c8f44137a4
NEW none[none] WinXP 36 of 37 16:22:56 16:22:56 1 none none:none
none|none none none

ea3e29047b
NEW none[none] WinXP 35 of 37 08:51:55 08:51:55 1 none none:none
none|none none none

986b59708d
[Firefox:117 hits: 04-07 to 11-18] 8a00217866 [0] WinXP 29 of 29 18:40:03 18:40:03 1 none ASM:Graph
PolyEnE| 100% lines=57 trace

c05385e600
[Firefox:24 hits: 05-12 to 11-15] 6a383b021d [0] WinXP 29 of 29 02:45:40 02:45:40 1 none ASM:Graph
PolyEnE| 99% lines=68 trace

7f66e51c85
[Firefox:18 hits: 07-11 to 10-25]
9d12fe9d3b
[Firefox:19 hits: 07-11 to 10-25] none[none]
none [none] WinXP 29 of 32 09:47:29 09:47:29 1 none none:none
none:none
none|none
none|none none
none none
none

1cc50efd1f
[Firefox: 4 hits: 11-12 to 11-19] none[none] WinXP 35 of 36 05:34:44 05:34:44 1 none none:none
none|none none none

45a69d1f27
NEW none[none] WinXP 36 of 37 06:00:07 06:00:07 1 none none:none
none|none none none

10889f1709
NEW none[none] WinXP 34 of 36 08:27:33 08:27:49 2 none none:none
none|none none none

e2aef2545b
NEW none[none] WinXP 3 of 37 18:46:30 18:46:30 1 none none:none
none|none none none

93a84a5dba
[Firefox:10 hits: 10-26 to 11-19] none[none] WinXP 33 of 35 12:18:43 12:18:43 1 none none:none
none|none none none

9e9244a382
[Firefox: 2 hits: 11-14 to 11-16] none[none] Win2K-f 33 of 36 07:24:34 07:24:34 1 none none:none
none|none none none

28ce5fc467
[Firefox:10 hits: 09-12 to 11-16] none[none] Win2K-f 31 of 36 15:47:55 15:47:55 1 none none:none
none|none none none

d921806f7a
NEW none[none] WinXP 34 of 37 16:09:03 16:09:03 1 none none:none
none|none none none

5818023061
[Firefox: 8 hits: 04-01 to 11-19] a227e5e49d [0] WinXP 32 of 32 12:46:52 12:46:52 1 none ASM:Graph
PolyEnE| 99% lines=68 trace

216ec67841
NEW none[none] Win2K-f 2 of 37 18:36:47 18:36:51 2 none none:none
none|none none none

a957fc6133
[Firefox: 2 hits: 11-13 to 11-14] none[none] WinXP 34 of 36 05:33:57 16:44:45 3 none none:none
none|none none none

0a686021c7
NEW
8eeb11591f
NEW none[none]
none [none] WinXP 34 of 37 07:22:47 07:22:47 1 none none:none
none:none
none|none
none|none none
none none
none

e50d19ea22
[Firefox: 9 hits: 10-21 to 11-18] none[none] WinXP 33 of 35 10:31:32 10:31:32 1 none none:none
none|none none none

0a686021c7
NEW none[none] WinXP 33 of 37 07:22:47 07:22:47 1 none none:none
none|none none none

413c9ac28b
[Firefox:22 hits: 09-26 to 11-19] none[none] Win2K-f 33 of 36 09:40:26 09:40:26 1 none none:none
none|none none none

d466be6715
NEW none[none] WinXP 34 of 36 14:27:39 14:27:39 1 none none:none
none|none none none

f616c7a23f
NEW none[none] WinXP 35 of 36 17:14:34 17:14:34 1 none none:none
none|none none none

4e51abcf57
[Firefox: 2 hits: 11-04 to 11-07] none[none] WinXP 35 of 36 07:37:05 07:37:05 1 none none:none
none|none none none

24e4c28fdb
[Firefox:12 hits: 10-25 to 11-19] none[none] WinXP 34 of 35 11:39:45 11:39:45 1 none none:none
none|none none none

73f1082158
[Firefox:2021 hits: 06-18 to 11-19]
752d7e4cf2
NEW
8ceee5cf8e
NEW
9d677c3f70
[Firefox: 7 hits: 06-20 to 08-12]
fb8f82fcb3
[Firefox:37 hits: 10-24 to 11-19] 73f1082158 [1]
none [none]
none [none]
none [4]
none [none] Win2K-f 11 of 36 01:38:10 01:38:10 1 none ASM:Graph
none:none
none:none
none:none
none:none
Armadillo|
none|none
none|none
tElock|
none|none lines=81
none
none
none
none trace
none
none
trace
none

41b9df60db
[Firefox:13 hits: 11-03 to 11-19]
954a98c971
[Firefox:13 hits: 06-09 to 11-19] none[none]
none [4] WinXP 31 of 33 00:17:51 00:17:51 1 none none:none
none:none
none|none
FSG| none
none none
trace

e604210b1a
[Firefox: 4 hits: 11-13 to 11-19] none[none] WinXP 34 of 35 01:05:19 01:05:19 1 none none:none
none|none none none

b74e792974
[Firefox:18 hits: 06-18 to 11-14] b74e792974 [1] WinXP
Win2K-f 31 of 33 07:23:07 11:36:24 2 none ASM:Graph
Armadillo| 47% lines=82 trace

5a47fce840
NEW none[none] WinXP 35 of 37 17:08:41 17:08:41 1 none none:none
none|none none none

41b9df60db
[Firefox:13 hits: 11-03 to 11-19] none[none] WinXP 21 of 36 00:17:51 07:54:49 2 none none:none
none|none none none

15093b4cc0
[Firefox:14 hits: 11-09 to 11-19] none[none] WinXP 35 of 36 03:42:48 06:52:37 2 none none:none
none|none none none

1c544ae06d
[Firefox: 5 hits: 09-25 to 11-14] none[none] WinXP 35 of 36 16:39:17 16:39:17 1 none none:none
none|none none none

3ae357d17b
[Firefox:114 hits: 04-04 to 11-14] 462a7be171 [0] WinXP 29 of 29 19:56:04 19:56:04 1 none ASM:Graph
PolyEnE| 99% lines=73 trace

da00a8e7a1
[Firefox:37 hits: 08-05 to 11-18] none[none] Win2K-f 34 of 36 15:17:01 15:17:01 1 none none:none
none|none none none

7f66e51c85
[Firefox:18 hits: 07-11 to 10-25] none[none] WinXP 32 of 33 09:47:29 09:47:29 1 none none:none
none|none none none

039c6a4bb7
NEW none[none] WinXP 34 of 36 15:07:29 15:07:29 1 none none:none
none|none none none

7d99b0e910
[Firefox:1131 hits: 12-31 to 11-19] 7a70e1b592 [0] WinXP 26 of 28 02:01:52 21:06:04 8 none ASM:Graph
PolyEnE| 99% lines=68 trace

018dbe7c7e
NEW none[none] WinXP 36 of 37 05:48:39 05:49:02 2 none none:none
none|none none none

4bd8e539ab
[Firefox: 2 hits: 11-03 to 11-16]
fb97e82c81
[Firefox: 2 hits: 11-03 to 11-16] none[none]
none [none] WinXP 31 of 35 20:47:32 20:47:32 1 none none:none
none:none
none|none
none|none none
none none
none

2afd89521c
[Firefox: 3 hits: 10-31 to 11-05] none[none] WinXP 35 of 36 13:07:20 13:07:20 1 none none:none
none|none none none

fbee2cb320
NEW none[none] Win2K-f 33 of 37 16:09:49 16:09:49 1 none none:none
none|none none none

1094c6aece
NEW none[none] WinXP 34 of 36 13:49:58 13:49:58 1 none none:none
none|none none none

df1392205b
NEW none[none] WinXP 34 of 36 10:09:40 10:09:40 1 none none:none
none|none none none

168aab35a3
[Firefox:193 hits: 06-17 to 11-19]
61426996c3
[Firefox:20 hits: 06-20 to 11-12] none[4]
61426996c3[1] WinXP 29 of 32 15:33:10 15:33:10 1 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=82 trace
trace

b74e792974
[Firefox:18 hits: 06-18 to 11-14]
f0e73c39a8
[Firefox:19 hits: 06-18 to 11-14] b74e792974 [1]
none [4] WinXP
Win2K-f 31 of 33 07:23:07 11:36:24 2 none ASM:Graph
none:none
Armadillo|
tElock| lines=82
none trace
trace

3060fff5c0
[Firefox: 6 hits: 08-22 to 11-04] none[none] WinXP 30 of 34 02:00:22 02:00:22 1 none none:none
none|none none none

4bd8e539ab
[Firefox: 2 hits: 11-03 to 11-16] none[none] WinXP 33 of 36 20:47:32 20:47:32 1 none none:none
none|none none none

ec470f944a
NEW none[none] WinXP 34 of 36 00:06:49 00:06:49 1 none none:none
none|none none none

73f1082158
[Firefox:2021 hits: 06-18 to 11-19]
752d7e4cf2
NEW
8ceee5cf8e
NEW
9d677c3f70
[Firefox: 7 hits: 06-20 to 08-12] 73f1082158 [1]
none [none]
none [none]
none [4] Win2K-f 29 of 32 01:38:10 01:38:10 1 none ASM:Graph
none:none
none:none
none:none
Armadillo|
none|none
none|none
tElock| lines=81
none
none
none trace
none
none
trace

42c101571e
[Firefox: 4 hits: 10-30 to 11-09] none[none] WinXP 35 of 36 22:55:10 22:55:10 1 none none:none
none|none none none

d9cb288f31
NEW none[none] Win2K-f 3 of 37 17:52:01 23:58:27 103 none none:none
none|none none none

9bb68450cd
[Firefox:21 hits: 10-26 to 11-19] none[none] WinXP 34 of 36 15:07:11 15:07:11 1 none none:none
none|none none none