Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page



01 January 2009

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5
UnPacket
MD5
Victim
OS
AntiVirus
Hit-Cnt
First
Encounter
Last
Encounter
Freq
Cnt
Behavioral
Clusters
Unpacked
Egg.asm
Packer
Fingerprint
API
Resolution
String
Cnt
Syscall
Trace
409ef22885
[Firefox:739 hits: 11-22 to 12-31]
none[3] Win2K-f 2 of 37 03:50:45 22:06:13 7 none none:none
UPX| none trace
739185e28d
NEW
none[3] Win2K-f 13 of 38 02:53:22 02:53:22 1 none none:none
UPX| none trace
3862324588
[Firefox:120 hits: 11-29 to 12-31]
none[3] Win2K-f 7 of 37 06:03:04 23:59:47 4 none none:none
UPX| none trace
17cf6a5252
[Firefox: 8 hits: 12-03 to 12-23]
none[3] Win2K-f 8 of 37 03:19:47 03:19:47 1 none none:none
UPX| none trace
0e3c4b161d
NEW
none[4] Win2K-f 0 of 38 21:25:20 21:25:20 1 none none:none
none|none none trace
dc331fb791
[Firefox:1254 hits: 11-24 to 12-31]
none[3] Win2K-f 3 of 37 00:14:40 23:34:05 29 none none:none
UPX| none trace
0e3c4b161d
NEW
83ead2dfa8
NEW
b74e792974
[Firefox:20 hits: 06-18 to 11-20]
none[4]
37da677eeb[0]
none [0]
Win2K-f 31 of 33 21:25:20 21:25:20 1 none none:none
ASM:Graph
none:none
none|none
none|none
Armadillo|
0% none
lines=0
lines=91
trace
trace
trace
741c93f3c1
[Firefox: 8 hits: 11-30 to 12-28]
none[3] Win2K-f 5 of 37 20:59:09 20:59:09 1 none none:none
UPX| none trace
bd35d4d98f
[Firefox:43 hits: 11-27 to 12-30]
none[3] Win2K-f 7 of 37 00:29:18 00:29:18 1 none none:none
Armadillo| none trace
0e3c4b161d
NEW
83ead2dfa8
NEW
none[4]
37da677eeb[0]
Win2K-f 7 of 38 21:25:20 21:25:20 1 none none:none
ASM:Graph
none|none
none|none
0% none
lines=0
trace
trace
9a9f93c4d2
[Firefox:11 hits: 12-23 to 12-27]
none[3] Win2K-f 16 of 39 09:44:48 09:44:48 1 none none:none
UPX| none trace
917c085aca
[Firefox:322 hits: 11-25 to 12-31]
none[3] Win2K-f 3 of 37 01:43:00 23:14:41 12 none none:none
Armadillo| none trace
71afca1665
[Firefox:84 hits: 11-23 to 12-31]
none[3] Win2K-f 2 of 37 01:34:21 23:21:36 4 none none:none
StarForce| none trace
553136081a
NEW
none[3] Win2K-f 15 of 38 09:05:17 09:05:17 1 none none:none
UPX| none trace
4f6b51ea3b
[Firefox:63 hits: 12-19 to 12-31]
none[3] Win2K-f 8 of 38 05:30:32 21:01:12 15 none none:none
MEW| none trace
2f54d5345a
NEW
none[3] Win2K-f 6 of 38 02:32:01 02:32:01 1 none none:none
UPX| none trace
9aaa5d9b81
NEW
none[3] Win2K-f 10 of 38 13:59:37 14:41:28 2 none none:none
UPX| none trace
0d31bddced
NEW
none[3] Win2K-f 5 of 38 06:51:02 06:51:02 1 none none:none
UPX| none trace
1a8dccb1b8
[Firefox: 8 hits: 10-06 to 12-11]
c35321def3 [0] WinXP 35 of 36 00:45:59 00:45:59 1 none ASM:Graph
PolyEnE| 100% lines=68 trace
1b1f4d453f
NEW
none[3] Win2K-f 14 of 39 03:13:03 03:13:03 1 none none:none
UPX| none trace
8ce32ded17
[Firefox:295 hits: 11-26 to 12-31]
none[3] Win2K-f 4 of 37 09:22:55 22:35:00 8 none none:none
Armadillo| none trace
cdae3bc26f
NEW
none[3] Win2K-f 14 of 38 03:53:13 04:00:45 2 none none:none
UPX| none trace
e1a2e3980d
[Firefox:13 hits: 12-05 to 12-30]
none[3] Win2K-f 9 of 38 09:31:01 10:38:39 2 none none:none
UPX| none trace
1a2c0e6130
[Firefox:413 hits: 05-01 to 12-22]
none[0] WinXP 29 of 29 14:37:48 14:37:48 1 none none:none
none|none 33% lines=60 trace
0e3c4b161d
NEW
83ead2dfa8
NEW
b74e792974
[Firefox:20 hits: 06-18 to 11-20]
db97fcb2d2
NEW
f0e73c39a8
[Firefox:21 hits: 06-18 to 11-20]
none[4]
37da677eeb[0]
none [0]
9e826e24a7[0]
3f1d6aa0fc[0]
Win2K-f 31 of 33 21:25:20 21:25:20 1 none none:none
ASM:Graph
none:none
ASM:Graph
ASM:Graph
none|none
none|none
Armadillo|
Stranik|
tElock|
95% none
lines=0
lines=91
lines=7
lines=120
embedded dns
trace
trace
trace
trace
trace
38ed850a0e
NEW
46990f37cd [0] WinXP 34 of 38 09:09:05 09:09:05 1 none ASM:Graph
Armadillo| 0% lines=91 trace
7587773eea
[Firefox:756 hits: 11-30 to 12-31]
none[3] Win2K-f 7 of 37 01:24:26 23:16:35 14 none none:none
StarForce| none trace
78ceaae025
[Firefox:10 hits: 11-22 to 12-28]
none[3] Win2K-f 8 of 37 04:27:28 11:04:08 2 none none:none
UPX| none trace
216ec67841
[Firefox:175 hits: 11-20 to 12-30]
none[3] Win2K-f 2 of 37 00:58:18 23:51:39 3 none none:none
StarForce| none trace
223d8089f8
[Firefox:590 hits: 11-21 to 12-31]
none[3] Win2K-f 2 of 37 00:21:19 21:39:56 12 none none:none
StarForce| none trace
38ed850a0e
NEW
b9297745a1
NEW
46990f37cd [0]
4294884d84[0]
WinXP 35 of 38 09:09:05 09:09:05 1 none ASM:Graph
ASM:Graph
Armadillo|
tElock|
96% lines=91
lines=64
embedded dns
trace
trace
d60e538e72
[Firefox:1551 hits: 11-22 to 12-31]
none[3] Win2K-f 2 of 37 01:11:59 23:37:05 16 none none:none
UPX| none trace
0e3c4b161d
NEW
83ead2dfa8
NEW
b74e792974
[Firefox:20 hits: 06-18 to 11-20]
db97fcb2d2
NEW
none[4]
37da677eeb[0]
none [0]
9e826e24a7[0]
Win2K-f 9 of 38 21:25:20 21:25:20 1 none none:none
ASM:Graph
none:none
ASM:Graph
none|none
none|none
Armadillo|
Stranik|
2% none
lines=0
lines=91
lines=7
trace
trace
trace
trace
d9cb288f31
[Firefox:14125 hits: 11-20 to 12-31]
45603a001c [0] Win2K-f 3 of 37 00:06:14 23:59:21 270 none ASM:Graph
UPX| 92% lines=174
embedded dns
trace