Multiperspective Malware Analysis Page - Daily Malware Binary Digest Summary

Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page

08 December 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.

Packed
MD5 UnPacket
MD5 Victim
OS AntiVirus
Hit-Cnt First
Encounter Last
Encounter Freq
Cnt Behavioral
Clusters Unpacked
Egg.asm Packer
Fingerprint API
Resolution String
Cnt Syscall
Trace

409ef22885
[Firefox:413 hits: 11-22 to 12-07] none[3] Win2K-f 2 of 37 03:30:37 17:27:26 10 none none:none
UPX| none trace

17cf6a5252
[Firefox: 3 hits: 12-03 to 12-07] none[3] Win2K-f 8 of 37 06:08:48 06:08:48 1 none none:none
UPX| none trace

3862324588
[Firefox:16 hits: 11-29 to 12-07] none[3] Win2K-f 7 of 37 04:43:58 14:23:17 4 none none:none
UPX| none trace

53bfe15e91
[Firefox:4102 hits: 06-17 to 12-06]
73f1082158
[Firefox:2037 hits: 06-18 to 12-06] 1473091351 [0]
none [0] WinXP 0 of 32 12:20:07 12:20:07 1 none ASM:Graph
none:none
tElock|
Armadillo| 0% lines=75
embedded dns
lines=90 trace
trace

dc331fb791
[Firefox:245 hits: 11-24 to 12-07] none[3] Win2K-f 3 of 37 01:45:12 23:30:37 34 none none:none
UPX| none trace

53bfe15e91
[Firefox:4102 hits: 06-17 to 12-06] 1473091351 [0] WinXP 33 of 33 12:20:07 12:20:07 1 none ASM:Graph
tElock| 96% lines=75
embedded dns trace

aa147583f5
NEW none[3] Win2K-f 7 of 38 20:53:18 20:53:18 1 none none:none
UPX| none trace

bd35d4d98f
[Firefox:10 hits: 11-27 to 12-07] none[3] Win2K-f 7 of 37 12:39:30 12:52:10 2 none none:none
Armadillo| none trace

855d31a773
NEW none[3] Win2K-f 9 of 38 10:25:07 10:25:07 1 none none:none
UPX| none trace

917c085aca
[Firefox:91 hits: 11-25 to 12-07] none[3] Win2K-f 3 of 37 04:21:37 23:57:52 13 none none:none
Armadillo| none trace

507252387e
[Firefox:18 hits: 11-27 to 12-07] none[3] Win2K-f 7 of 37 05:06:24 08:20:20 3 none none:none
UPX| none trace

10c3e12a46
[Firefox:22 hits: 11-01 to 11-16] none[3] WinXP 34 of 36 14:47:30 14:47:30 1 none none:none
PolyEnE| none trace

7d6debb82c
NEW none[3] Win2K-f 8 of 38 12:34:30 12:34:30 1 none none:none
UPX| none trace

8ce32ded17
[Firefox:28 hits: 11-26 to 12-07] none[3] Win2K-f 4 of 37 04:38:42 20:15:55 4 none none:none
Armadillo| none trace

4f88618d4f
[Firefox:15 hits: 11-29 to 12-06] none[3] Win2K-f 8 of 37 13:43:12 13:43:12 1 none none:none
UPX| none trace

e1a2e3980d
NEW none[3] Win2K-f 9 of 38 19:26:22 19:26:22 1 none none:none
UPX| none trace

b27d73bfcb
[Firefox:65 hits: 10-10 to 11-21] 473c6454ce [0] WinXP 35 of 36 00:20:45 22:31:01 2 none ASM:Graph
PolyEnE| 100% lines=68 trace

7587773eea
[Firefox:113 hits: 11-30 to 12-07] none[3] Win2K-f 7 of 37 01:58:44 22:56:14 28 none none:none
StarForce| none trace

a12cab51ef
[Firefox:366 hits: 05-01 to 11-26] none[0] WinXP 29 of 29 13:58:58 13:58:58 1 none none:none
ASPack| 54% lines=281
embedded dns trace

223d8089f8
[Firefox:273 hits: 11-21 to 12-07] none[3] Win2K-f 2 of 37 00:20:43 21:44:35 14 none none:none
StarForce| none trace

216ec67841
[Firefox:48 hits: 11-20 to 12-07] none[3] Win2K-f 2 of 37 04:33:21 21:34:12 5 none none:none
StarForce| none trace

d6e680e241
NEW none[3] Win2K-f 9 of 38 18:22:30 18:22:30 1 none none:none
UPX| none trace

29b0ab6522
[Firefox: 4 hits: 11-24 to 12-03] none[3] Win2K-f 8 of 37 17:37:18 17:37:18 1 none none:none
UPX| none trace

d60e538e72
[Firefox:860 hits: 11-22 to 12-07] none[3] Win2K-f 2 of 37 02:45:59 23:37:12 23 none none:none
UPX| none trace

5f7f335ce4
NEW none[3] Win2K-f 8 of 37 11:15:18 11:15:18 1 none none:none
UPX| none trace

d538e6e0e4
NEW none[3] Win2K-f 8 of 38 18:37:19 18:37:19 1 none none:none
UPX| none trace

4e6c4dd8b1
[Firefox:19 hits: 11-25 to 12-07] none[3] Win2K-f 4 of 37 18:02:16 18:02:16 1 none none:none
StarForce| none trace

d9cb288f31
[Firefox:5959 hits: 11-20 to 12-07] 45603a001c [0] Win2K-f 3 of 37 00:06:19 23:57:34 359 none ASM:Graph
UPX| 92% lines=174
embedded dns trace