3 ms·
Ask HN: Anyone know which malware is this?
My server that I and my family use for our daily computing, with Remote Desktop Services, today got infected with some malware, and I'm really interested in knowing what is it?
https://www.virustotal.com/en/file/0c03b26478deec8800be159af8c0023f4a79c2dfebb515b50b4955820e8f4a00/analysis/
I noticed that Cryptographic Services was using 50% of the CPU, and that it was sending more than 20 Mbps of data out, so I looked into it and found a random file in the Temp folder that I uploaded to virus total.
Thinking it was ransomware, I shut off the computer, copied my files (couldn't find any encrypted ones) and reinstalled the OS. I didn't save a sample of the malware.
Anyone know what is it?