Home / malwarePDF  

Ransom:Win32/Bartcrypt.A


First posted on 29 October 2016.
Source: Microsoft

Aliases :

There are no other names known for Ransom:Win32/Bartcrypt.A.

Explanation :

Installation
This threat can create files on your PC, including:

  • %SystemRoot% \users\public\videos\sample videos\maid with the flaxen hair.mp4.bart.zip
  • %SystemRoot% \users\public\videos\sample videos\sleep away.mp4.bart.zip
  • %SystemRoot% \users\public\videos\sample videos\wildlife.mov.bart.zip
  • %SystemRoot% \users\public\videos\sample videos\wildlife.wmv.bart.zip
  • %SystemRoot% \virtualstorage\vstorinstall.vbs.bart.zip
  • %SystemRoot% \virtualstorage\vstortrace.vbs.bart.zip
  • %SystemRoot% \autoexec.bat.bart.zip


The malware uses code injection to make it harder to detect and remove. It can inject code into running processes.

Payload
Modifies system settings

This threat can make changes to the way your PC behaves. It can:
  • Change how files are shown in File Explorer


This malware description was published using automated analysis of file SHA1 a2b1ad334652060d2efcff21164da9dd32deb225.

Last update 29 October 2016

 

TOP

Malware :

Family: