what did malwaretechblog find?
a generic killswitch
Let's not be aggressive. This is not a generic Killswitch like @MalwareTechBlog found, it's a temporary workaround— Amit Serper (@0xAmit) June 27, 2017