Sample viewer

vx.netlux.org/Virus.DOS.Rubbit.681

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:09:45.363061129Z 53 PC: 9014a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:45.364560968Z 53 PC: 901c8 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T23:09:45.366698775Z 37 PC: 901d8 | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T23:09:45.368091339Z 48 PC: 901e3 | Get DOS version
2018-12-17T23:09:45.369460554Z 37 PC: 901f4 | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T23:09:45.371521361Z 9 PC: 12a47 | Display string (String= 'Warning!! Rubbit V1.0 come in .! Written By Peter Ferng ...!!')