Here comes the next step in the ATM arms race. https://krebsonsecurity.com/2012/07/atm-skimmers-get-wafer-thin/ If there is something just out of reach people will find a way to get to it. I'll be honest I make a point not to use ATM's.
I am still working on getting the shellcode out so I can play with it, but in the mean time I hashed the file. https://www.virustotal.com/file/51d0586cd16f1339674610b5e2d0eec810f647a40731ae551ad426699f333866/analysis/ We are on the right track, I might have to back burner this one for a bit.