Hotta Killer Process Termination Command

Aaron Beardslee@abeardslee

•updated Jan 30, 2026•7•0•69

Detects the execution of 'polers.dll' via rundll32.exe, a command-line pattern used by the Interlock ransomware group's 'Hotta Killer' tool to terminate security software by exploiting CVE-2025-61155.