Sample viewer

vx.netlux.org/Virus.DOS.SkyNet.672

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:09:10.282423309Z 53 PC: 12b70 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:10.283874951Z 37 PC: 12b84 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:10.284922877Z 71 PC: 12b8e | Get current directory
2018-12-17T23:09:10.28758378Z 26 PC: 12b96 | Set disk transfer address
2018-12-17T23:09:10.288777303Z 65 PC: 12ba4 | Delete file (Filename = 'anti-vir.dat')
2018-12-17T23:09:10.294468812Z 65 PC: 12bac | Delete file (Filename = 'ivb.ntz')
2018-12-17T23:09:10.299930322Z 78 PC: 12bbd | Find first file
2018-12-17T23:09:10.305420408Z 78 PC: 12bc7 | Find first file
2018-12-17T23:09:10.315932691Z 59 PC: 12bd1 | Change current directory
2018-12-17T23:09:10.324489589Z 37 PC: 12d2d | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:10.325472289Z 59 PC: 12d4a | Change current directory
2018-12-17T23:09:10.327378767Z 26 PC: 12d51 | Set disk transfer address