Multiperspective Malware Analysis Page - Daily Malware Binary Digest Summary

Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page

19 December 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.

Packed
MD5 UnPacket
MD5 Victim
OS AntiVirus
Hit-Cnt First
Encounter Last
Encounter Freq
Cnt Behavioral
Clusters Unpacked
Egg.asm Packer
Fingerprint API
Resolution String
Cnt Syscall
Trace

409ef22885
[Firefox:570 hits: 11-22 to 12-18] none[3] Win2K-f 2 of 37 02:31:01 20:54:34 8 none none:none
UPX| none trace

9877a58a9b
NEW none[3] Win2K-f 9 of 38 15:20:37 15:20:37 1 none none:none
StarForce| none trace

3862324588
[Firefox:70 hits: 11-29 to 12-18] none[3] Win2K-f 7 of 37 07:37:54 18:01:02 6 none none:none
UPX| none trace

53bfe15e91
[Firefox:4107 hits: 06-17 to 12-16]
73f1082158
[Firefox:2040 hits: 06-18 to 12-16] 1473091351 [0]
none [0] WinXP 0 of 32 01:14:58 01:14:58 1 none ASM:Graph
none:none
tElock|
Armadillo| 0% lines=75
embedded dns
lines=90 trace
trace

fcb4920986
[Firefox:26 hits: 11-21 to 12-17] none[3] Win2K-f 2 of 37 13:02:27 22:15:30 4 none none:none
UPX| none trace

dc331fb791
[Firefox:756 hits: 11-24 to 12-18] none[3] Win2K-f 3 of 37 00:36:50 23:27:01 54 none none:none
UPX| none trace

24ecbc6b15
NEW none[3] Win2K-f 8 of 38 02:29:46 02:29:46 1 none none:none
StarForce| none trace

53bfe15e91
[Firefox:4107 hits: 06-17 to 12-16] 1473091351 [0] WinXP 33 of 33 01:14:58 01:14:58 1 none ASM:Graph
tElock| 96% lines=75
embedded dns trace

3373948767
[Firefox:41 hits: 07-03 to 11-06] cd17602c34 [0] WinXP 30 of 33 16:11:46 16:11:46 1 none ASM:Graph
tElock| 96% lines=64
embedded dns trace

bd35d4d98f
[Firefox:23 hits: 11-27 to 12-17] none[3] Win2K-f 7 of 37 16:01:01 18:21:26 2 none none:none
Armadillo| none trace

3373948767
[Firefox:41 hits: 07-03 to 11-06]
c73f738c30
[Firefox:41 hits: 07-03 to 11-06] cd17602c34 [0]
4eeba8be6f[0] WinXP 29 of 33 16:11:46 16:11:46 1 none ASM:Graph
ASM:Graph
tElock|
Armadillo| 0% lines=64
embedded dns
lines=91 trace
trace

917c085aca
[Firefox:210 hits: 11-25 to 12-18] none[3] Win2K-f 3 of 37 02:23:01 23:12:29 12 none none:none
Armadillo| none trace

71afca1665
[Firefox:50 hits: 11-23 to 12-18] none[3] Win2K-f 2 of 37 02:00:42 21:58:41 5 none none:none
StarForce| none trace

4f6b51ea3b
NEW none[3] Win2K-f 8 of 38 15:37:24 15:37:24 1 none none:none
MEW| none trace

e7c52f2640
NEW none[3] Win2K-f 9 of 38 08:53:54 08:53:54 1 none none:none
UPX| none trace

507252387e
[Firefox:28 hits: 11-27 to 12-17] none[3] Win2K-f 7 of 37 04:58:35 04:58:35 1 none none:none
UPX| none trace

9c4ad5fe13
NEW none[3] Win2K-f 21 of 38 06:35:09 06:35:09 1 none none:none
StarForce| none trace

6dea646ad4
NEW
81b606082f
NEW 0341c6090a [0]
d5b69b4350[0] Win2K-f 35 of 38 19:56:57 19:56:57 1 none ASM:Graph
ASM:Graph
Armadillo|
tElock| 96% lines=91
lines=64
embedded dns trace
trace

8ce32ded17
[Firefox:111 hits: 11-26 to 12-18] none[3] Win2K-f 4 of 37 02:54:22 18:30:05 3 none none:none
Armadillo| none trace

4f88618d4f
[Firefox:53 hits: 11-29 to 12-18] none[3] Win2K-f 8 of 37 15:32:40 15:46:15 2 none none:none
UPX| none trace

e1a2e3980d
[Firefox: 3 hits: 12-05 to 12-16] none[3] Win2K-f 9 of 38 11:19:04 11:19:04 1 none none:none
UPX| none trace

6dea646ad4
NEW 0341c6090a [0] Win2K-f 33 of 38 19:56:57 19:56:57 1 none ASM:Graph
Armadillo| 0% lines=91 trace

7587773eea
[Firefox:439 hits: 11-30 to 12-18] none[3] Win2K-f 7 of 37 00:56:40 23:02:29 43 none none:none
StarForce| none trace

78ceaae025
[Firefox: 6 hits: 11-22 to 12-18] none[3] Win2K-f 8 of 37 05:13:35 05:13:35 1 none none:none
UPX| none trace

223d8089f8
[Firefox:415 hits: 11-21 to 12-18] none[3] Win2K-f 2 of 37 00:10:57 21:57:10 16 none none:none
StarForce| none trace

216ec67841
[Firefox:118 hits: 11-20 to 12-18] none[3] Win2K-f 2 of 37 04:33:35 22:05:14 7 none none:none
StarForce| none trace

d60e538e72
[Firefox:1184 hits: 11-22 to 12-18] none[3] Win2K-f 2 of 37 00:10:44 23:21:10 38 none none:none
UPX| none trace

8b6560d2fd
NEW none[3] Win2K-f 10 of 38 18:51:59 18:51:59 1 none none:none
UPX| none trace

15d4d85dc0
[Firefox:14 hits: 06-10 to 10-30] 4c95ae4b3d [0] WinXP 32 of 32 16:50:37 16:50:37 1 none ASM:Graph
StarForce| 98% lines=212
embedded dns trace

d9cb288f31
[Firefox:9765 hits: 11-20 to 12-18] 45603a001c [0] Win2K-f 3 of 37 00:15:49 23:58:48 314 none ASM:Graph
UPX| 92% lines=174
embedded dns trace