Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


09 December 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
409ef22885
[Firefox:423 hits: 11-22 to 12-08]		 none[3] Win2K-f 2 of 37 00:44:45 23:12:56 20 none none:none
 UPX| none trace
3862324588
[Firefox:20 hits: 11-29 to 12-08]		 none[3] Win2K-f 7 of 37 11:33:42 13:28:35 2 none none:none
 UPX| none trace
dc331fb791
[Firefox:279 hits: 11-24 to 12-08]		 none[3] Win2K-f 3 of 37 00:58:28 22:46:52 41 none none:none
 UPX| none trace
fcb4920986
[Firefox: 7 hits: 11-21 to 12-07]		 none[3] Win2K-f 2 of 37 00:31:05 23:30:10 3 none none:none
 UPX| none trace
71afca1665
[Firefox:41 hits: 11-23 to 12-07]		 none[3] Win2K-f 2 of 37 20:39:44 20:39:44 1 none none:none
 StarForce| none trace
917c085aca
[Firefox:104 hits: 11-25 to 12-08]		 none[3] Win2K-f 3 of 37 01:18:31 20:04:45 9 none none:none
 Armadillo| none trace
df17a625ee
[Firefox:208 hits: 05-02 to 11-20]		 none[0] WinXP 29 of 29 17:25:22 17:25:22 1 none none:none
 ASPack| 72% lines=298
embedded dns		 trace
986b59708d
[Firefox:114 hits: 05-08 to 11-20]		 none[0] WinXP 29 of 29 12:53:32 12:53:32 1 none none:none
 PolyEnE| 100% lines=57 trace
1a8dccb1b8
[Firefox: 4 hits: 10-06 to 11-03]		 c35321def3 [0] WinXP 35 of 36 00:25:08 00:40:16 2 none ASM:Graph
 PolyEnE| 100% lines=68 trace
8ce32ded17
[Firefox:32 hits: 11-26 to 12-08]		 none[3] Win2K-f 4 of 37 00:19:50 10:09:30 3 none none:none
 Armadillo| none trace
4f88618d4f
[Firefox:16 hits: 11-29 to 12-08]		 none[3] Win2K-f 8 of 37 09:23:00 23:59:45 5 none none:none
 UPX| none trace
e3c6f35216
NEW		 none[3] Win2K-f 9 of 38 12:57:34 12:57:34 1 none none:none
 UPX| none trace
7587773eea
[Firefox:141 hits: 11-30 to 12-08]		 none[3] Win2K-f 7 of 37 01:51:14 21:38:01 18 none none:none
 StarForce| none trace
a12cab51ef
[Firefox:367 hits: 05-01 to 12-08]		 none[0] WinXP 29 of 29 02:01:40 02:01:40 1 none none:none
 ASPack| 54% lines=281
embedded dns		 trace
223d8089f8
[Firefox:287 hits: 11-21 to 12-08]		 none[3] Win2K-f 2 of 37 01:16:06 22:31:49 15 none none:none
 StarForce| none trace
216ec67841
[Firefox:53 hits: 11-20 to 12-08]		 none[3] Win2K-f 2 of 37 07:32:35 22:13:22 7 none none:none
 StarForce| none trace
d60e538e72
[Firefox:883 hits: 11-22 to 12-08]		 none[3] Win2K-f 2 of 37 02:24:27 23:49:49 29 none none:none
 UPX| none trace
46de697133
NEW		 none[3] Win2K-f 9 of 38 22:55:28 22:55:28 1 none none:none
 UPX| none trace
4e6c4dd8b1
[Firefox:20 hits: 11-25 to 12-08]		 none[3] Win2K-f 4 of 37 18:40:21 18:41:18 2 none none:none
 StarForce| none trace
d9cb288f31
[Firefox:6318 hits: 11-20 to 12-08]		 45603a001c [0] Win2K-f 3 of 37 00:06:39 23:59:27 366 none ASM:Graph
 UPX| 92% lines=174
embedded dns		 trace