The hacker behind a cyberattack that has crippled the Petroleos Mexicanos computer systems since the weekend is hoping to squeeze about $5 million out of the company and appears to have set a deadline of Nov. 30.