Multiperspective Malware Analysis Page - Daily Malware Binary Digest Summary

Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page

13 January 2009

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.

Packed
MD5 UnPacket
MD5 Victim
OS AntiVirus
Hit-Cnt First
Encounter Last
Encounter Freq
Cnt Behavioral
Clusters Unpacked
Egg.asm Packer
Fingerprint API
Resolution String
Cnt Syscall
Trace

409ef22885
[Firefox:819 hits: 11-22 to 01-12] none[3] Win2K-f 2 of 37 04:56:14 20:00:28 6 none none:none
UPX| none trace

53bfe15e91
[Firefox:4121 hits: 06-17 to 01-12]
73f1082158
[Firefox:2045 hits: 06-18 to 12-21] 1473091351 [0]
none [0] Win2K-f 0 of 32 21:19:51 21:19:51 1 none ASM:Graph
none:none
tElock|
Armadillo| 0% lines=75
embedded dns
lines=90 trace
trace

0fadd81286
[Firefox: 5 hits: 12-07 to 12-29] none[3] Win2K-f 10 of 38 09:23:03 09:23:03 1 none none:none
StarForce| none trace

fcb4920986
[Firefox:62 hits: 11-21 to 01-11] none[3] Win2K-f 2 of 37 17:43:22 18:04:40 2 none none:none
UPX| none trace

41b6106f52
[Firefox: 9 hits: 11-22 to 01-07] none[3] Win2K-f 8 of 37 13:40:15 13:40:15 1 none none:none
UPX| none trace

dc331fb791
[Firefox:1535 hits: 11-24 to 01-12] none[3] Win2K-f 3 of 37 00:17:05 20:49:59 26 none none:none
UPX| none trace

53bfe15e91
[Firefox:4121 hits: 06-17 to 01-12] 1473091351 [0] Win2K-f 33 of 33 21:19:51 21:19:51 1 none ASM:Graph
tElock| 96% lines=75
embedded dns trace

917c085aca
[Firefox:398 hits: 11-25 to 01-12] none[3] Win2K-f 3 of 37 03:06:00 23:54:43 10 none none:none
Armadillo| none trace

8ce32ded17
[Firefox:461 hits: 11-26 to 01-12] none[3] Win2K-f 4 of 37 00:47:23 23:27:57 24 none none:none
Armadillo| none trace

e1a2e3980d
[Firefox:25 hits: 12-05 to 01-11] none[3] Win2K-f 9 of 38 00:08:00 01:38:25 2 none none:none
UPX| none trace

304951d900
NEW
97b885b707
NEW 3168493a34 [0]
0bbfbee00e[0] WinXP 5 of 38 09:02:10 09:02:10 1 none ASM:Graph
ASM:Graph
PolyEnE|
StarForce| 83% lines=134
lines=27 trace
trace

7587773eea
[Firefox:909 hits: 11-30 to 01-12] none[3] Win2K-f 7 of 37 03:13:39 22:24:16 14 none none:none
StarForce| none trace

304951d900
NEW
97b885b707
NEW
db97fcb2d2
[Firefox: 2 hits: 12-31 to 01-01]
e45d25ef7a
NEW 3168493a34 [0]
0bbfbee00e[0]
9e826e24a7[0]
a97db71fbc[0] WinXP 1 of 38 09:02:10 09:02:10 1 none ASM:Graph
ASM:Graph
ASM:Graph
ASM:Graph
PolyEnE|
StarForce|
Stranik|
none|none 85% lines=134
lines=27
lines=7
lines=339
embedded dns trace
trace
trace
trace

304951d900
NEW 3168493a34 [0] WinXP 36 of 38 09:02:10 09:02:10 1 none ASM:Graph
PolyEnE| 100% lines=134 trace

223d8089f8
[Firefox:701 hits: 11-21 to 01-12] none[3] Win2K-f 2 of 37 02:00:51 17:49:53 9 none none:none
StarForce| none trace

216ec67841
[Firefox:207 hits: 11-20 to 01-12] none[3] Win2K-f 2 of 37 08:36:25 18:12:28 4 none none:none
StarForce| none trace

29b0ab6522
[Firefox: 6 hits: 11-24 to 01-02] none[3] Win2K-f 8 of 37 17:56:57 17:56:57 1 none none:none
UPX| none trace

d60e538e72
[Firefox:1763 hits: 11-22 to 01-12] none[3] Win2K-f 2 of 37 00:52:10 23:50:41 24 none none:none
UPX| none trace

4e6c4dd8b1
[Firefox:45 hits: 11-25 to 01-11] none[3] Win2K-f 4 of 37 04:27:27 11:40:43 2 none none:none
StarForce| none trace

304951d900
NEW
97b885b707
NEW
db97fcb2d2
[Firefox: 2 hits: 12-31 to 01-01] 3168493a34 [0]
0bbfbee00e[0]
9e826e24a7[0] WinXP 9 of 38 09:02:10 09:02:10 1 none ASM:Graph
ASM:Graph
ASM:Graph
PolyEnE|
StarForce|
Stranik| 2% lines=134
lines=27
lines=7 trace
trace
trace

d9cb288f31
[Firefox:16921 hits: 11-20 to 01-12] 45603a001c [0] Win2K-f 3 of 37 00:13:14 23:50:30 199 none ASM:Graph
UPX| 92% lines=174
embedded dns trace