Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page



29 December 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5
UnPacket
MD5
Victim
OS
AntiVirus
Hit-Cnt
First
Encounter
Last
Encounter
Freq
Cnt
Behavioral
Clusters
Unpacked
Egg.asm
Packer
Fingerprint
API
Resolution
String
Cnt
Syscall
Trace
409ef22885
[Firefox:696 hits: 11-22 to 12-28]
none[3] Win2K-f 2 of 37 01:03:20 22:06:27 10 none none:none
UPX| none trace
3862324588
[Firefox:105 hits: 11-29 to 12-28]
none[3] Win2K-f 7 of 37 07:10:52 22:58:01 6 none none:none
UPX| none trace
0fadd81286
[Firefox: 4 hits: 12-07 to 12-28]
none[3] Win2K-f 10 of 38 21:00:22 21:00:22 1 none none:none
StarForce| none trace
8ebd7fad15
NEW
8b3323ee23 [0] WinXP 37 of 39 10:21:16 10:21:16 1 none ASM:Graph
PolyEnE| 100% lines=68 trace
808a83b6e5
NEW
fefa90fd10 [0] WinXP 36 of 39 05:00:08 05:00:08 1 none ASM:Graph
PolyEnE| 100% lines=129 trace
fcb4920986
[Firefox:46 hits: 11-21 to 12-28]
none[3] Win2K-f 2 of 37 03:41:26 04:29:40 3 none none:none
UPX| none trace
dc331fb791
[Firefox:1158 hits: 11-24 to 12-28]
none[3] Win2K-f 3 of 37 00:54:07 20:14:26 38 none none:none
UPX| none trace
53bfe15e91
[Firefox:4114 hits: 06-17 to 12-22]
1473091351 [0] Win2K-f 33 of 33 00:45:42 21:28:37 2 none ASM:Graph
tElock| 96% lines=75
embedded dns
trace
bd35d4d98f
[Firefox:38 hits: 11-27 to 12-28]
none[3] Win2K-f 7 of 37 16:15:24 17:07:03 3 none none:none
Armadillo| none trace
917c085aca
[Firefox:302 hits: 11-25 to 12-28]
none[3] Win2K-f 3 of 37 03:43:05 16:57:48 10 none none:none
Armadillo| none trace
71afca1665
[Firefox:75 hits: 11-23 to 12-28]
none[3] Win2K-f 2 of 37 00:38:40 16:36:27 4 none none:none
StarForce| none trace
4f6b51ea3b
[Firefox:28 hits: 12-19 to 12-28]
none[3] Win2K-f 8 of 38 02:59:16 23:54:26 14 none none:none
MEW| none trace
507252387e
[Firefox:34 hits: 11-27 to 12-26]
none[3] Win2K-f 7 of 37 11:55:35 11:55:35 1 none none:none
UPX| none trace
08f384b76a
[Firefox: 2 hits: 12-03 to 12-18]
none[3] Win2K-f 7 of 37 14:43:09 14:43:09 1 none none:none
MEW| none trace
1b1f4d453f
NEW
none[3] Win2K-f 14 of 39 13:59:22 13:59:22 1 none none:none
UPX| none trace
53bfe15e91
[Firefox:4114 hits: 06-17 to 12-22]
57ce4acac2
[Firefox:365 hits: 06-17 to 12-02]
1473091351 [0]
none [0]
Win2K-f 0 of 33 21:28:37 21:28:37 1 none ASM:Graph
none:none
tElock|
Armadillo|
0% lines=75
embedded dns
lines=90
trace
trace
8ce32ded17
[Firefox:234 hits: 11-26 to 12-28]
none[3] Win2K-f 4 of 37 00:13:40 23:08:25 21 none none:none
Armadillo| none trace
4f88618d4f
[Firefox:79 hits: 11-29 to 12-28]
none[3] Win2K-f 8 of 37 12:13:45 17:37:39 4 none none:none
UPX| none trace
b2e59d2b3b
NEW
e0256de741 [0] WinXP 37 of 39 00:08:14 00:08:14 1 none ASM:Graph
PolyEnE| 100% lines=76
embedded dns
trace
53bfe15e91
[Firefox:4114 hits: 06-17 to 12-22]
a08f3b74a4
[Firefox:1472 hits: 06-18 to 12-25]
1473091351 [0]
none [0]
Win2K-f 0 of 33 00:45:42 00:45:42 1 none ASM:Graph
none:none
tElock|
Armadillo|
0% lines=75
embedded dns
lines=90
trace
trace
7587773eea
[Firefox:705 hits: 11-30 to 12-28]
none[3] Win2K-f 7 of 37 05:29:25 23:20:12 18 none none:none
StarForce| none trace
7031b17fea
NEW
d9e002026f [0] WinXP 34 of 36 16:00:34 16:00:34 1 none ASM:Graph
PolyEnE| 100% lines=132
embedded dns
trace
223d8089f8
[Firefox:550 hits: 11-21 to 12-28]
none[3] Win2K-f 2 of 37 00:13:33 20:23:43 13 none none:none
StarForce| none trace
216ec67841
[Firefox:168 hits: 11-20 to 12-28]
none[3] Win2K-f 2 of 37 01:44:34 07:59:08 4 none none:none
StarForce| none trace
d60e538e72
[Firefox:1476 hits: 11-22 to 12-28]
none[3] Win2K-f 2 of 37 06:19:35 23:53:54 26 none none:none
UPX| none trace
13e15a653e
[Firefox:37 hits: 11-21 to 12-20]
none[3] Win2K-f 6 of 37 14:57:39 14:57:39 1 none none:none
UPX| none trace
4e6c4dd8b1
[Firefox:37 hits: 11-25 to 12-28]
none[3] Win2K-f 4 of 37 08:48:38 08:48:38 1 none none:none
StarForce| none trace
d9cb288f31
[Firefox:13241 hits: 11-20 to 12-28]
45603a001c [0] Win2K-f 3 of 37 00:06:40 23:57:02 310 none ASM:Graph
UPX| 92% lines=174
embedded dns
trace