Sample viewer

vx.netlux.org/Virus.DOS.Spooky.314

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:01:02.073295469Z 53 PC: 12a54 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T23:01:02.075117839Z 37 PC: 12a5b | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T23:01:02.076102618Z 37 PC: 12a5f | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T23:01:02.077197418Z 9 PC: 12a79 | Display string (Could not find end pointer)
2018-12-17T23:01:02.080273065Z 153 PC: 12a7e | UNKNOWN!
2018-12-17T23:01:02.081080651Z 53 PC: 12a8e | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:01:02.082988922Z 37 PC: 12aa0 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:01:02.086032238Z 49 PC: 12aa7 | Terminate and stay resident (Return code = '0' | Memory size = '36')

{"DateBased":true,"Day":1,"Month":4,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":13743,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:38:54.042451443Z 53 PC: 12a54 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-25T12:38:54.044910028Z 37 PC: 12a5b | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-25T12:38:54.05568202Z 37 PC: 12a5f | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-25T12:38:54.057373092Z 9 PC: 12a79 | Display string (Could not find end pointer)
2018-12-25T12:38:54.063585937Z 153 PC: 12a7e | UNKNOWN!
2018-12-25T12:38:54.06519367Z 53 PC: 12a8e | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T12:38:54.066833616Z 37 PC: 12aa0 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T12:38:54.068465593Z 49 PC: 12aa7 | Terminate and stay resident (Return code = '0' | Memory size = '36')

{"DateBased":true,"Day":21,"Month":4,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":13743,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:38:55.036360025Z 53 PC: 12a54 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-25T12:38:55.037754755Z 37 PC: 12a5b | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-25T12:38:55.042054541Z 37 PC: 12a5f | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-25T12:38:55.044033313Z 9 PC: 12a79 | Display string (Could not find end pointer)
2018-12-25T12:38:55.050539128Z 153 PC: 12a7e | UNKNOWN!
2018-12-25T12:38:55.053024996Z 53 PC: 12a8e | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T12:38:55.055137866Z 37 PC: 12aa0 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T12:38:55.056824568Z 49 PC: 12aa7 | Terminate and stay resident (Return code = '0' | Memory size = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":13743,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:38:55.330827353Z 53 PC: 12a54 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-25T12:38:55.332870637Z 37 PC: 12a5b | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-25T12:38:55.334259308Z 37 PC: 12a5f | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-25T12:38:55.336013092Z 9 PC: 12a79 | Display string (Could not find end pointer)
2018-12-25T12:38:55.341913458Z 153 PC: 12a7e | UNKNOWN!
2018-12-25T12:38:55.343662622Z 53 PC: 12a8e | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T12:38:55.344834831Z 37 PC: 12aa0 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T12:38:55.346021844Z 49 PC: 12aa7 | Terminate and stay resident (Return code = '0' | Memory size = '36')