Sample viewer

vx.netlux.org/Virus.DOS.Jorgito.730

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:07:14.531040089Z 249 PC: 12a96 | UNKNOWN!
2018-12-17T23:07:14.532960939Z 53 PC: 12ab1 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:07:14.534944849Z 88 PC: 12ac0 | case 0xGet or set allocation strateg:
2018-12-17T23:07:14.536345162Z 88 PC: 12ac6 | case 0xGet or set allocation strateg:
2018-12-17T23:07:14.537722331Z 88 PC: 12acf | case 0xGet or set allocation strateg:
2018-12-17T23:07:14.540582136Z 74 PC: 12ae2 | Reallocate memory
2018-12-17T23:07:14.542296739Z 88 PC: 12aea | case 0xGet or set allocation strateg:
2018-12-17T23:07:14.544006954Z 72 PC: 12af1 | Allocate memory
2018-12-17T23:07:14.546656876Z 88 PC: 12b1a | case 0xGet or set allocation strateg:
2018-12-17T23:07:14.548456639Z 88 PC: 12b20 | case 0xGet or set allocation strateg:
2018-12-17T23:07:14.549993097Z 37 PC: 12b31 | Set interrupt vector (Interrupt = '33' AKA 'Random read')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":15803,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:44:30.95852789Z 249 PC: 12a96 | UNKNOWN!
2018-12-25T12:44:30.960141723Z 53 PC: 12ab1 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T12:44:30.961821701Z 88 PC: 12ac0 | case 0xGet or set allocation strateg:
2018-12-25T12:44:30.96293843Z 88 PC: 12ac6 | case 0xGet or set allocation strateg:
2018-12-25T12:44:30.964062146Z 88 PC: 12acf | case 0xGet or set allocation strateg:
2018-12-25T12:44:30.965486217Z 74 PC: 12ae2 | Reallocate memory
2018-12-25T12:44:30.96650589Z 88 PC: 12aea | case 0xGet or set allocation strateg:
2018-12-25T12:44:30.967562412Z 72 PC: 12af1 | Allocate memory
2018-12-25T12:44:30.969631292Z 88 PC: 12b1a | case 0xGet or set allocation strateg:
2018-12-25T12:44:30.971111752Z 88 PC: 12b20 | case 0xGet or set allocation strateg:
2018-12-25T12:44:30.972416158Z 37 PC: 12b31 | Set interrupt vector (Interrupt = '33' AKA 'Random read')

{"DateBased":true,"Day":14,"Month":3,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":15803,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:44:30.991826877Z 249 PC: 12a96 | UNKNOWN!
2018-12-25T12:44:30.993753333Z 53 PC: 12ab1 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T12:44:30.995107278Z 88 PC: 12ac0 | case 0xGet or set allocation strateg:
2018-12-25T12:44:30.996464849Z 88 PC: 12ac6 | case 0xGet or set allocation strateg:
2018-12-25T12:44:30.998269258Z 88 PC: 12acf | case 0xGet or set allocation strateg:
2018-12-25T12:44:30.999487263Z 74 PC: 12ae2 | Reallocate memory
2018-12-25T12:44:31.000800771Z 88 PC: 12aea | case 0xGet or set allocation strateg:
2018-12-25T12:44:31.002572638Z 72 PC: 12af1 | Allocate memory
2018-12-25T12:44:31.004304284Z 88 PC: 12b1a | case 0xGet or set allocation strateg:
2018-12-25T12:44:31.00561102Z 88 PC: 12b20 | case 0xGet or set allocation strateg:
2018-12-25T12:44:31.007937231Z 37 PC: 12b31 | Set interrupt vector (Interrupt = '33' AKA 'Random read')

{"DateBased":true,"Day":14,"Month":3,"Year":1998,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":15803,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:44:30.986944867Z 249 PC: 12a96 | UNKNOWN!
2018-12-25T12:44:30.988126181Z 53 PC: 12ab1 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T12:44:30.990573486Z 88 PC: 12ac0 | case 0xGet or set allocation strateg:
2018-12-25T12:44:30.992225393Z 88 PC: 12ac6 | case 0xGet or set allocation strateg:
2018-12-25T12:44:30.99355418Z 88 PC: 12acf | case 0xGet or set allocation strateg:
2018-12-25T12:44:30.996516592Z 74 PC: 12ae2 | Reallocate memory
2018-12-25T12:44:30.998049851Z 88 PC: 12aea | case 0xGet or set allocation strateg:
2018-12-25T12:44:30.999610558Z 72 PC: 12af1 | Allocate memory
2018-12-25T12:44:31.002310522Z 88 PC: 12b1a | case 0xGet or set allocation strateg:
2018-12-25T12:44:31.004001676Z 88 PC: 12b20 | case 0xGet or set allocation strateg:
2018-12-25T12:44:31.017067204Z 37 PC: 12b31 | Set interrupt vector (Interrupt = '33' AKA 'Random read')