.. /systemctl
Star

Stop Service

Manages the status of system services


Paths:

Resources:
Acknowledgements:

Stop Service

  1. Stops all services on an ESXi host.

    service $s stop
    Use case
    An adversary stops all services within the ESXi host to prevent any interference with ransomware encryption operations.
    Privileges required
    Administrator
    Operating systems
    ESXi
    Additional Procedural Examples
    • /usr/local/etc/r/etc/init.d/%s* systemctl stop %/sbin/service %s/bin/sh -c "for s in `service -l | grep %s`; do service $s stop;
    ATT&CK® technique
    T1529

    Tags
    E-Crime: GwisinLocker
    Reported to be targeting Linux-based systems in South Korea