Sample viewer

vx.netlux.org/Virus.DOS.Druid.303

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:54:56.10059064Z 37 PC: 12a4d | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:54:56.102660454Z 37 PC: 12a51 | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:54:56.104607616Z 37 PC: 12a59 | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:54:56.107251239Z 37 PC: 12a5d | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:54:56.108985912Z 71 PC: 12a66 | Get current directory
2018-12-17T22:54:56.11356202Z 78 PC: 12a6d | Find first file
2018-12-17T22:54:56.126977515Z 59 PC: 12ad9 | Change current directory
2018-12-17T22:54:56.132875851Z 9 PC: 12ae4 | Display string (String= ' Your infected with Druid Spatz Virus!')
2018-12-17T22:54:56.136872669Z 76 PC: 12ae9 | Terminate with return code (Return code = '0')