Spora

Spora is a ransomware virus distributed via spam (malicious attachments). Each scam spam contains an HTA file that, when executed, extracts a JavaScript file ("closed.js"), placing it in the system folder "%Temp%" . The JavaScript file extracts an executable file with a random name and launches it. The executable then starts encrypting the files using RSA cryptography.