Ransom.Linux.HELLOKITTY.YXBHM

It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Detalles de entrada

It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Instalación

Infiltra los archivos siguientes:

• {Malware Folder}/work.log → Contains log of actions done.

Agrega los procesos siguientes:

• If ran with the argument -k:
  • esxcli vm process list
  • esxcli vm process kill -t=soft -w={id}
  • esxcli vm process kill -t=hard -w={id}
  • esxcli vm process kill -t=force -w={id}