Linux_Ransomware_GwisinLocker [ransomware]

uint32(0) == 0x464C457F and
        (
            (
                (
                    all of ($find_files_v1_p*)
                ) and
                (
                    all of ($kill_processes_v1_p*)
                ) and
                (
                    $init_key_v1
                ) and
                (
                    all of ($encrypt_files_v1_p*)
                ) and
                (
                    $shut_down_esxi_v1
                )
            ) or
            (
                (
                    all of ($find_files_v2_p*)
                ) and
                (
                    all of ($kill_processes_v2_p*)
                ) and
                (
                    $init_key_v2
                ) and
                (
                    all of ($encrypt_files_v2_p*)
                )
            )
        )