Sample viewer

vx.netlux.org/Trojan.DOS.DelFiles.b

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T21:50:31.41049596Z 48 PC: 12a4c | Get DOS version
2018-12-17T21:50:31.411632993Z 53 PC: 12be0 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T21:50:31.412633167Z 53 PC: 12bed | Get interrupt vector (Interrupt = '4' AKA 'Auxiliary output')
2018-12-17T21:50:31.413772403Z 53 PC: 12bfa | Get interrupt vector (Interrupt = '5' AKA 'Printer output')
2018-12-17T21:50:31.414830188Z 53 PC: 12c07 | Get interrupt vector (Interrupt = '6' AKA 'Direct console I/O')
2018-12-17T21:50:31.415839244Z 37 PC: 12c1b | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T21:50:31.417069705Z 74 PC: 12af7 | Reallocate memory
2018-12-17T21:50:31.418642218Z 68 PC: 13104 | I/O control for devices (Set for = '��4')
2018-12-17T21:50:31.420270729Z 68 PC: 13104 | I/O control for devices (Set for = '')
2018-12-17T21:50:31.423628984Z 47 PC: 13fac | Get disk transfer address
2018-12-17T21:50:31.424650401Z 26 PC: 13fb5 | Set disk transfer address
2018-12-17T21:50:31.425504633Z 78 PC: 13fbf | Find first file
2018-12-17T21:50:31.431401009Z 26 PC: 13fc8 | Set disk transfer address
2018-12-17T21:50:31.433067242Z 65 PC: 13145 | Delete file (Filename = '')
2018-12-17T21:50:31.43706382Z 47 PC: 13fe3 | Get disk transfer address
2018-12-17T21:50:31.43815749Z 26 PC: 13fec | Set disk transfer address
2018-12-17T21:50:31.43919284Z 79 PC: 13ff0 | Find next file
2018-12-17T21:50:31.442210041Z 26 PC: 13ff9 | Set disk transfer address
2018-12-17T21:50:31.44365364Z 65 PC: 13145 | Delete file (Filename = '')
2018-12-17T21:50:31.446732936Z 47 PC: 13fe3 | Get disk transfer address
2018-12-17T21:50:31.447715162Z 26 PC: 13fec | Set disk transfer address
2018-12-17T21:50:31.448944237Z 79 PC: 13ff0 | Find next file
2018-12-17T21:50:31.451251588Z 26 PC: 13ff9 | Set disk transfer address
2018-12-17T21:50:31.452802928Z 65 PC: 13145 | Delete file (Filename = '')
2018-12-17T21:50:31.456917044Z 47 PC: 13fe3 | Get disk transfer address
2018-12-17T21:50:31.458052114Z 26 PC: 13fec | Set disk transfer address
2018-12-17T21:50:31.458942224Z 79 PC: 13ff0 | Find next file
2018-12-17T21:50:31.461464733Z 26 PC: 13ff9 | Set disk transfer address
2018-12-17T21:50:31.463140854Z 65 PC: 13145 | Delete file (Filename = '')
2018-12-17T21:50:31.467137761Z 47 PC: 13fe3 | Get disk transfer address
2018-12-17T21:50:31.468170295Z 26 PC: 13fec | Set disk transfer address
2018-12-17T21:50:31.469214691Z 79 PC: 13ff0 | Find next file
2018-12-17T21:50:31.470714576Z 26 PC: 13ff9 | Set disk transfer address
2018-12-17T21:50:31.471899046Z 65 PC: 13145 | Delete file (Filename = '')
2018-12-17T21:50:31.47599769Z 47 PC: 13fe3 | Get disk transfer address
2018-12-17T21:50:31.476890217Z 26 PC: 13fec | Set disk transfer address
2018-12-17T21:50:31.477925005Z 79 PC: 13ff0 | Find next file
2018-12-17T21:50:31.480161914Z 26 PC: 13ff9 | Set disk transfer address
2018-12-17T21:50:31.481787066Z 65 PC: 13145 | Delete file (Filename = '')
2018-12-17T21:50:31.48590057Z 47 PC: 13fe3 | Get disk transfer address
2018-12-17T21:50:31.487179758Z 26 PC: 13fec | Set disk transfer address
2018-12-17T21:50:31.488268958Z 79 PC: 13ff0 | Find next file
2018-12-17T21:50:31.490625322Z 26 PC: 13ff9 | Set disk transfer address
2018-12-17T21:50:31.49294898Z 65 PC: 13145 | Delete file (Filename = '')
2018-12-17T21:50:31.497064111Z 47 PC: 13fe3 | Get disk transfer address
2018-12-17T21:50:31.498081522Z 26 PC: 13fec | Set disk transfer address
2018-12-17T21:50:31.499104191Z 79 PC: 13ff0 | Find next file
2018-12-17T21:50:31.501308037Z 26 PC: 13ff9 | Set disk transfer address
2018-12-17T21:50:31.502997111Z 65 PC: 13145 | Delete file (Filename = '')
2018-12-17T21:50:31.507096244Z 47 PC: 13fe3 | Get disk transfer address
2018-12-17T21:50:31.508036127Z 26 PC: 13fec | Set disk transfer address
2018-12-17T21:50:31.508913312Z 79 PC: 13ff0 | Find next file
2018-12-17T21:50:31.51113854Z 26 PC: 13ff9 | Set disk transfer address
2018-12-17T21:50:31.512254413Z 65 PC: 13145 | Delete file (Filename = '')
2018-12-17T21:50:31.514953339Z 47 PC: 13fe3 | Get disk transfer address
2018-12-17T21:50:31.51600844Z 26 PC: 13fec | Set disk transfer address
2018-12-17T21:50:31.516863519Z 79 PC: 13ff0 | Find next file
2018-12-17T21:50:31.518920905Z 26 PC: 13ff9 | Set disk transfer address
2018-12-17T21:50:31.520171294Z 47 PC: 13fac | Get disk transfer address
2018-12-17T21:50:31.521074548Z 26 PC: 13fb5 | Set disk transfer address
2018-12-17T21:50:31.522154617Z 78 PC: 13fbf | Find first file
2018-12-17T21:50:31.53874532Z 26 PC: 13fc8 | Set disk transfer address
2018-12-17T21:50:31.540372796Z 65 PC: 13145 | Delete file (Filename = '')
2018-12-17T21:50:31.544446193Z 47 PC: 13fe3 | Get disk transfer address
2018-12-17T21:50:31.545461604Z 26 PC: 13fec | Set disk transfer address
2018-12-17T21:50:31.546309149Z 79 PC: 13ff0 | Find next file
2018-12-17T21:50:31.548521225Z 26 PC: 13ff9 | Set disk transfer address
2018-12-17T21:50:31.550177311Z 65 PC: 13145 | Delete file (Filename = '')
2018-12-17T21:50:31.554167564Z 47 PC: 13fe3 | Get disk transfer address
2018-12-17T21:50:31.55506806Z 26 PC: 13fec | Set disk transfer address
2018-12-17T21:50:31.55600827Z 79 PC: 13ff0 | Find next file
2018-12-17T21:50:31.557823337Z 26 PC: 13ff9 | Set disk transfer address
2018-12-17T21:50:31.559000336Z 65 PC: 13145 | Delete file (Filename = '')
2018-12-17T21:50:31.561795646Z 47 PC: 13fe3 | Get disk transfer address
2018-12-17T21:50:31.562528442Z 26 PC: 13fec | Set disk transfer address
2018-12-17T21:50:31.563243832Z 79 PC: 13ff0 | Find next file
2018-12-17T21:50:31.565233651Z 26 PC: 13ff9 | Set disk transfer address
2018-12-17T21:50:31.566453886Z 65 PC: 13145 | Delete file (Filename = '')
2018-12-17T21:50:31.570517726Z 47 PC: 13fe3 | Get disk transfer address
2018-12-17T21:50:31.571520509Z 26 PC: 13fec | Set disk transfer address
2018-12-17T21:50:31.572255094Z 79 PC: 13ff0 | Find next file
2018-12-17T21:50:31.573855775Z 26 PC: 13ff9 | Set disk transfer address
2018-12-17T21:50:31.575224207Z 65 PC: 13145 | Delete file (Filename = '')
2018-12-17T21:50:31.577988522Z 47 PC: 13fe3 | Get disk transfer address
2018-12-17T21:50:31.578721353Z 26 PC: 13fec | Set disk transfer address
2018-12-17T21:50:31.579610891Z 79 PC: 13ff0 | Find next file
2018-12-17T21:50:31.581556671Z 26 PC: 13ff9 | Set disk transfer address
2018-12-17T21:50:31.58279166Z 65 PC: 13145 | Delete file (Filename = '')
2018-12-17T21:50:31.586084187Z 47 PC: 13fe3 | Get disk transfer address
2018-12-17T21:50:31.587452775Z 26 PC: 13fec | Set disk transfer address
2018-12-17T21:50:31.588966765Z 79 PC: 13ff0 | Find next file
2018-12-17T21:50:31.591387816Z 26 PC: 13ff9 | Set disk transfer address
2018-12-17T21:50:31.593010732Z 65 PC: 13145 | Delete file (Filename = '')
2018-12-17T21:50:31.597812105Z 47 PC: 13fe3 | Get disk transfer address
2018-12-17T21:50:31.599153772Z 26 PC: 13fec | Set disk transfer address
2018-12-17T21:50:31.600084586Z 79 PC: 13ff0 | Find next file
2018-12-17T21:50:31.602833195Z 26 PC: 13ff9 | Set disk transfer address
2018-12-17T21:50:31.604938544Z 65 PC: 13145 | Delete file (Filename = '')
2018-12-17T21:50:31.609230331Z 47 PC: 13fe3 | Get disk transfer address
2018-12-17T21:50:31.610636195Z 26 PC: 13fec | Set disk transfer address
2018-12-17T21:50:31.611623971Z 79 PC: 13ff0 | Find next file
2018-12-17T21:50:31.613914684Z 26 PC: 13ff9 | Set disk transfer address
2018-12-17T21:50:31.615719977Z 65 PC: 13145 | Delete file (Filename = '')
2018-12-17T21:50:31.61861903Z 47 PC: 13fe3 | Get disk transfer address
2018-12-17T21:50:31.619396827Z 26 PC: 13fec | Set disk transfer address
2018-12-17T21:50:31.620709379Z 79 PC: 13ff0 | Find next file
2018-12-17T21:50:31.622490378Z 26 PC: 13ff9 | Set disk transfer address
2018-12-17T21:50:31.623863577Z 47 PC: 13fac | Get disk transfer address
2018-12-17T21:50:31.625223567Z 26 PC: 13fb5 | Set disk transfer address
2018-12-17T21:50:31.62611097Z 78 PC: 13fbf | Find first file
2018-12-17T21:50:31.631517366Z 26 PC: 13fc8 | Set disk transfer address
2018-12-17T21:50:31.633691492Z 47 PC: 13fac | Get disk transfer address
2018-12-17T21:50:31.634594767Z 26 PC: 13fb5 | Set disk transfer address
2018-12-17T21:50:31.635445662Z 78 PC: 13fbf | Find first file
2018-12-17T21:50:31.63739463Z 26 PC: 13fc8 | Set disk transfer address
2018-12-17T21:50:31.63909886Z 47 PC: 13fac | Get disk transfer address
2018-12-17T21:50:31.640042186Z 26 PC: 13fb5 | Set disk transfer address
2018-12-17T21:50:31.641200644Z 78 PC: 13fbf | Find first file
2018-12-17T21:50:31.642882295Z 26 PC: 13fc8 | Set disk transfer address
2018-12-17T21:50:31.643884446Z 47 PC: 13fe3 | Get disk transfer address
2018-12-17T21:50:31.645036634Z 26 PC: 13fec | Set disk transfer address
2018-12-17T21:50:31.645888769Z 79 PC: 13ff0 | Find next file
2018-12-17T21:50:31.647986523Z 26 PC: 13ff9 | Set disk transfer address
2018-12-17T21:50:31.650202665Z 47 PC: 13fac | Get disk transfer address
2018-12-17T21:50:31.651094821Z 26 PC: 13fb5 | Set disk transfer address
2018-12-17T21:50:31.651860578Z 78 PC: 13fbf | Find first file
2018-12-17T21:50:31.654021158Z 26 PC: 13fc8 | Set disk transfer address
2018-12-17T21:50:31.655751551Z 47 PC: 13fac | Get disk transfer address
2018-12-17T21:50:31.656672104Z 26 PC: 13fb5 | Set disk transfer address
2018-12-17T21:50:31.657973625Z 78 PC: 13fbf | Find first file
2018-12-17T21:50:31.659801591Z 26 PC: 13fc8 | Set disk transfer address
2018-12-17T21:50:31.660895899Z 47 PC: 13fe3 | Get disk transfer address
2018-12-17T21:50:31.662033159Z 26 PC: 13fec | Set disk transfer address
2018-12-17T21:50:31.662942821Z 79 PC: 13ff0 | Find next file
2018-12-17T21:50:31.665442386Z 26 PC: 13ff9 | Set disk transfer address
2018-12-17T21:50:31.6669455Z 47 PC: 13fac | Get disk transfer address
2018-12-17T21:50:31.66772519Z 26 PC: 13fb5 | Set disk transfer address
2018-12-17T21:50:31.669126799Z 78 PC: 13fbf | Find first file
2018-12-17T21:50:31.670938952Z 26 PC: 13fc8 | Set disk transfer address
2018-12-17T21:50:31.673565765Z 47 PC: 13fac | Get disk transfer address
2018-12-17T21:50:31.674799745Z 26 PC: 13fb5 | Set disk transfer address
2018-12-17T21:50:31.675840921Z 78 PC: 13fbf | Find first file
2018-12-17T21:50:31.677261019Z 26 PC: 13fc8 | Set disk transfer address
2018-12-17T21:50:31.678622584Z 47 PC: 13fe3 | Get disk transfer address
2018-12-17T21:50:31.679409543Z 26 PC: 13fec | Set disk transfer address
2018-12-17T21:50:31.680442587Z 79 PC: 13ff0 | Find next file
2018-12-17T21:50:31.683313759Z 26 PC: 13ff9 | Set disk transfer address
2018-12-17T21:50:31.685237098Z 47 PC: 13fac | Get disk transfer address
2018-12-17T21:50:31.686187744Z 26 PC: 13fb5 | Set disk transfer address
2018-12-17T21:50:31.687491589Z 78 PC: 13fbf | Find first file
2018-12-17T21:50:31.689358094Z 26 PC: 13fc8 | Set disk transfer address
2018-12-17T21:50:31.691168277Z 47 PC: 13fac | Get disk transfer address
2018-12-17T21:50:31.692726651Z 26 PC: 13fb5 | Set disk transfer address
2018-12-17T21:50:31.69352195Z 78 PC: 13fbf | Find first file
2018-12-17T21:50:31.694782906Z 26 PC: 13fc8 | Set disk transfer address
2018-12-17T21:50:31.696343497Z 47 PC: 13fe3 | Get disk transfer address
2018-12-17T21:50:31.697350747Z 26 PC: 13fec | Set disk transfer address
2018-12-17T21:50:31.69826257Z 79 PC: 13ff0 | Find next file
2018-12-17T21:50:31.700661304Z 26 PC: 13ff9 | Set disk transfer address
2018-12-17T21:50:31.702499671Z 47 PC: 13fac | Get disk transfer address
2018-12-17T21:50:31.703719349Z 26 PC: 13fb5 | Set disk transfer address
2018-12-17T21:50:31.704780166Z 78 PC: 13fbf | Find first file
2018-12-17T21:50:31.706539198Z 26 PC: 13fc8 | Set disk transfer address
2018-12-17T21:50:31.708712808Z 47 PC: 13fac | Get disk transfer address
2018-12-17T21:50:31.70976605Z 26 PC: 13fb5 | Set disk transfer address
2018-12-17T21:50:31.710646294Z 78 PC: 13fbf | Find first file
2018-12-17T21:50:31.712833715Z 26 PC: 13fc8 | Set disk transfer address
2018-12-17T21:50:31.713906239Z 47 PC: 13fe3 | Get disk transfer address
2018-12-17T21:50:31.714856289Z 26 PC: 13fec | Set disk transfer address
2018-12-17T21:50:31.716185477Z 79 PC: 13ff0 | Find next file
2018-12-17T21:50:31.718570088Z 26 PC: 13ff9 | Set disk transfer address
2018-12-17T21:50:31.720371785Z 47 PC: 13fac | Get disk transfer address
2018-12-17T21:50:31.721699092Z 26 PC: 13fb5 | Set disk transfer address
2018-12-17T21:50:31.722583751Z 78 PC: 13fbf | Find first file
2018-12-17T21:50:31.724195504Z 26 PC: 13fc8 | Set disk transfer address
2018-12-17T21:50:31.726357452Z 47 PC: 13fac | Get disk transfer address
2018-12-17T21:50:31.727244265Z 26 PC: 13fb5 | Set disk transfer address
2018-12-17T21:50:31.728212591Z 78 PC: 13fbf | Find first file
2018-12-17T21:50:31.730339017Z 26 PC: 13fc8 | Set disk transfer address
2018-12-17T21:50:31.731369298Z 47 PC: 13fe3 | Get disk transfer address
2018-12-17T21:50:31.732488936Z 26 PC: 13fec | Set disk transfer address
2018-12-17T21:50:31.733491592Z 79 PC: 13ff0 | Find next file
2018-12-17T21:50:31.735701897Z 26 PC: 13ff9 | Set disk transfer address
2018-12-17T21:50:31.737815923Z 47 PC: 13fac | Get disk transfer address
2018-12-17T21:50:31.738590094Z 26 PC: 13fb5 | Set disk transfer address
2018-12-17T21:50:31.739254157Z 78 PC: 13fbf | Find first file
2018-12-17T21:50:31.740845474Z 26 PC: 13fc8 | Set disk transfer address
2018-12-17T21:50:31.742059268Z 47 PC: 13fac | Get disk transfer address
2018-12-17T21:50:31.742739338Z 26 PC: 13fb5 | Set disk transfer address
2018-12-17T21:50:31.743788983Z 78 PC: 13fbf | Find first file
2018-12-17T21:50:31.745000461Z 26 PC: 13fc8 | Set disk transfer address
2018-12-17T21:50:31.745891135Z 47 PC: 13fe3 | Get disk transfer address
2018-12-17T21:50:31.746976164Z 26 PC: 13fec | Set disk transfer address
2018-12-17T21:50:31.747685994Z 79 PC: 13ff0 | Find next file
2018-12-17T21:50:31.749264971Z 26 PC: 13ff9 | Set disk transfer address
2018-12-17T21:50:31.750625043Z 47 PC: 13fac | Get disk transfer address
2018-12-17T21:50:31.751322906Z 26 PC: 13fb5 | Set disk transfer address
2018-12-17T21:50:31.752150111Z 78 PC: 13fbf | Find first file
2018-12-17T21:50:31.753524127Z 26 PC: 13fc8 | Set disk transfer address
2018-12-17T21:50:31.754724549Z 47 PC: 13fac | Get disk transfer address
2018-12-17T21:50:31.755755479Z 26 PC: 13fb5 | Set disk transfer address
2018-12-17T21:50:31.756512015Z 78 PC: 13fbf | Find first file
2018-12-17T21:50:31.758174663Z 26 PC: 13fc8 | Set disk transfer address
2018-12-17T21:50:31.760115702Z 47 PC: 13fe3 | Get disk transfer address
2018-12-17T21:50:31.761051154Z 26 PC: 13fec | Set disk transfer address
2018-12-17T21:50:31.761794397Z 79 PC: 13ff0 | Find next file
2018-12-17T21:50:31.764317201Z 26 PC: 13ff9 | Set disk transfer address
2018-12-17T21:50:31.766137717Z 47 PC: 13fac | Get disk transfer address
2018-12-17T21:50:31.767067573Z 26 PC: 13fb5 | Set disk transfer address
2018-12-17T21:50:31.768255918Z 78 PC: 13fbf | Find first file
2018-12-17T21:50:31.769991772Z 26 PC: 13fc8 | Set disk transfer address
2018-12-17T21:50:31.771818591Z 47 PC: 13fac | Get disk transfer address
2018-12-17T21:50:31.772663264Z 26 PC: 13fb5 | Set disk transfer address
2018-12-17T21:50:31.77334607Z 78 PC: 13fbf | Find first file
2018-12-17T21:50:31.774979387Z 26 PC: 13fc8 | Set disk transfer address
2018-12-17T21:50:31.776057346Z 47 PC: 13fe3 | Get disk transfer address
2018-12-17T21:50:31.776936668Z 26 PC: 13fec | Set disk transfer address
2018-12-17T21:50:31.778179432Z 79 PC: 13ff0 | Find next file
2018-12-17T21:50:31.780261264Z 26 PC: 13ff9 | Set disk transfer address
2018-12-17T21:50:31.781898954Z 28 PC: 1306a | Get allocation info for specified drive
2018-12-17T21:50:31.820940412Z 37 PC: 12c27 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T21:50:31.822741404Z 37 PC: 12c32 | Set interrupt vector (Interrupt = '4' AKA 'Auxiliary output')
2018-12-17T21:50:31.823709308Z 37 PC: 12c3d | Set interrupt vector (Interrupt = '5' AKA 'Printer output')
2018-12-17T21:50:31.82528349Z 37 PC: 12c48 | Set interrupt vector (Interrupt = '6' AKA 'Direct console I/O')
2018-12-17T21:50:31.826843437Z 64 PC: 1402e | Write file or device (Write 25 bytes on handle 2)
2018-12-17T21:50:31.831349443Z 76 PC: 12bcb | Terminate with return code (Return code = '255')