Multiperspective Malware Analysis Page - Daily Malware Binary Digest Summary

Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page

16 December 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.

Packed
MD5 UnPacket
MD5 Victim
OS AntiVirus
Hit-Cnt First
Encounter Last
Encounter Freq
Cnt Behavioral
Clusters Unpacked
Egg.asm Packer
Fingerprint API
Resolution String
Cnt Syscall
Trace

b71563573f
NEW none[3] Win2K-f 10 of 36 22:38:17 22:38:17 1 none none:none
UPX| none trace

409ef22885
[Firefox:533 hits: 11-22 to 12-15] none[3] Win2K-f 2 of 37 01:19:13 19:28:10 12 none none:none
UPX| none trace

17cf6a5252
[Firefox: 4 hits: 12-03 to 12-08] none[3] Win2K-f 8 of 37 10:28:05 10:28:05 1 none none:none
UPX| none trace

3862324588
[Firefox:48 hits: 11-29 to 12-15] none[3] Win2K-f 7 of 37 00:11:00 18:44:44 8 none none:none
UPX| none trace

53bfe15e91
[Firefox:4106 hits: 06-17 to 12-15]
73f1082158
[Firefox:2039 hits: 06-18 to 12-10] 1473091351 [0]
none [0] Win2K-f 0 of 32 23:24:57 23:24:57 1 none ASM:Graph
none:none
tElock|
Armadillo| 0% lines=75
embedded dns
lines=90 trace
trace

dc331fb791
[Firefox:599 hits: 11-24 to 12-15] none[3] Win2K-f 3 of 37 00:14:54 23:57:48 51 none none:none
UPX| none trace

30b1c8ae06
[Firefox: 5 hits: 10-30 to 11-08] 27ac1f628f [0] WinXP 35 of 36 14:43:00 14:43:00 1 none ASM:Graph
PolyEnE| 100% lines=68 trace

bfda9b8926
[Firefox: 2 hits: 12-13 to 12-13] none[3] Win2K-f 18 of 38 10:18:27 10:18:27 1 none none:none
StarForce| none trace

53bfe15e91
[Firefox:4106 hits: 06-17 to 12-15] 1473091351 [0] Win2K-f 33 of 33 23:24:57 23:24:57 1 none ASM:Graph
tElock| 96% lines=75
embedded dns trace

c6201bc2fa
NEW acf340520e [0] WinXP 32 of 38 10:23:40 10:23:40 1 none ASM:Graph
Armadillo| 0% lines=91 trace

741c93f3c1
[Firefox: 5 hits: 11-30 to 12-14] none[3] Win2K-f 5 of 37 17:02:29 17:02:29 1 none none:none
UPX| none trace

ce6769b482
NEW none[3] Win2K-f 12 of 38 09:11:58 09:11:58 1 none none:none
UPX| none trace

71afca1665
[Firefox:44 hits: 11-23 to 12-13] none[3] Win2K-f 2 of 37 16:14:39 16:14:39 1 none none:none
StarForce| none trace

917c085aca
[Firefox:176 hits: 11-25 to 12-15] none[3] Win2K-f 3 of 37 03:24:20 20:44:48 11 none none:none
Armadillo| none trace

c6201bc2fa
NEW
ffdc2f78c9
NEW acf340520e [0]
49b08c0456[0] WinXP 33 of 37 10:23:40 10:23:40 1 none ASM:Graph
ASM:Graph
Armadillo|
tElock| 96% lines=91
lines=64
embedded dns trace
trace

8ce32ded17
[Firefox:80 hits: 11-26 to 12-15] none[3] Win2K-f 4 of 37 02:18:00 23:47:48 13 none none:none
Armadillo| none trace

4f88618d4f
[Firefox:44 hits: 11-29 to 12-15] none[3] Win2K-f 8 of 37 00:32:42 19:04:48 6 none none:none
UPX| none trace

e1a2e3980d
[Firefox: 2 hits: 12-05 to 12-08] none[3] Win2K-f 9 of 38 13:37:50 13:37:50 1 none none:none
UPX| none trace

7587773eea
[Firefox:325 hits: 11-30 to 12-15] none[3] Win2K-f 7 of 37 00:27:26 22:51:37 33 none none:none
StarForce| none trace

216ec67841
[Firefox:97 hits: 11-20 to 12-15] none[3] Win2K-f 2 of 37 03:39:55 22:21:50 10 none none:none
StarForce| none trace

223d8089f8
[Firefox:380 hits: 11-21 to 12-15] none[3] Win2K-f 2 of 37 04:08:58 21:34:35 12 none none:none
StarForce| none trace

d60e538e72
[Firefox:1094 hits: 11-22 to 12-15] none[3] Win2K-f 2 of 37 00:36:42 23:06:38 25 none none:none
UPX| none trace

e50d19ea22
[Firefox:12 hits: 10-21 to 12-14] b4a086e5d0 [0] WinXP 33 of 35 21:26:02 21:41:08 2 none ASM:Graph
PolyEnE| 100% lines=73
embedded dns trace

03f912899b
[Firefox:206 hits: 05-06 to 11-20] none[0] WinXP 32 of 32 11:29:52 11:29:52 1 none none:none
none|none 32% lines=64 trace

13e15a653e
[Firefox:32 hits: 11-21 to 12-15] none[3] Win2K-f 6 of 37 03:13:57 14:48:04 2 none none:none
UPX| none trace

a0139d7ad8
[Firefox:193 hits: 05-03 to 12-01] none[0] WinXP 29 of 29 09:47:44 09:47:44 1 none none:none
PolyEnE| 99% lines=68 trace

4e6c4dd8b1
[Firefox:28 hits: 11-25 to 12-14] none[3] Win2K-f 4 of 37 14:40:27 14:40:27 1 none none:none
StarForce| none trace

d9cb288f31
[Firefox:8765 hits: 11-20 to 12-15] 45603a001c [0] Win2K-f 3 of 37 00:06:08 23:59:59 337 none ASM:Graph
UPX| 92% lines=174
embedded dns trace