Malware

About “Heur.Pack.Emotet.6” infection

Malware Removal

The Heur.Pack.Emotet.6 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Heur.Pack.Emotet.6 virus can do?

  • Executable code extraction
  • Compression (or decompression)
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Exhibits possible ransomware file modification behavior
  • Writes a potential ransom message to disk
  • Mimics icon used for popular non-executable file format
  • Creates a known Maktub ransomware decryption instruction / key file.
  • Anomalous binary characteristics

How to determine Heur.Pack.Emotet.6?



File Info:

crc32: BF8F1491
md5: e87136d20396db6da59342011a203111
name: E87136D20396DB6DA59342011A203111.mlw
sha1: 97c308207a9354ec869f56bd42267c56b48d6c4d
sha256: 7887277540f971323a2c823526014136590fbffa3c5e4472de31e3e705459df4
sha512: 073f00250bf0d603b82f4adb94881115addda48944761fa2e21a94554021b4f41e2174ac9276788ea20f7bde62ba06f0f56b05178141fdaf8d396c628e871c13
ssdeep: 3072:cYOvEC49nmy5fOajnI8gV6sPQkd61tb7iaOXiy8X500m+DZNXCJuSwCufvBufv4:cYmEDmyEajnPu6sujX1SuSwR1
type: PE32 executable (GUI) Intel 80386, for MS Windows


Version Info:

LegalCopyright: (C) 2007-2015  Moo0
CompanyName: Moo0
PrivateBuild: 1.3.18.2
LegalTrademarks: (C) 2007-2015  Moo0
Comments: Internally Three
ProductName: Pdu Envelope
ProductVersion: 1.3.18.2
FileDescription: Internally Three
OriginalFilename: Pdu Envelope
Translation: 0x0409 0x04b0

Heur.Pack.Emotet.6 also known as:

K7AntiVirusTrojan ( 0055e3ef1 )
Elasticmalicious (high confidence)
DrWebTrojan.Encoder.4343
CynetMalicious (score: 100)
CAT-QuickHealRansom.Takabum.S9
ALYacGen:Heur.Pack.Emotet.6
CylanceUnsafe
ZillyaDownloader.Cabby.Win32.1859
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaRansom:Win32/Takabum.5cf9d980
K7GWTrojan ( 0055e3ef1 )
Cybereasonmalicious.20396d
SymantecTrojan.Gen.2
ESET-NOD32Win32/Filecoder.MaktubLocker.A
APEXMalicious
AvastWin32:Malware-gen
ClamAVBC.Win.Packer.Troll-14
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Heur.Pack.Emotet.6
NANO-AntivirusTrojan.Win32.MlwGen.ebfebf
SUPERAntiSpywareRansom.Maktub/Variant
MicroWorld-eScanGen:Heur.Pack.Emotet.6
TencentMalware.Win32.Gencirc.10c0efe7
Ad-AwareGen:Heur.Pack.Emotet.6
ComodoMalware@#1caj4rdda78hr
BitDefenderThetaGen:NN.ZexaF.34670.pu0@aG4PE7ai
VIPRETrojan.Win32.Generic!BT
TrendMicroRANSOM_CRYPNGB_FC290003.UVPM
McAfee-GW-EditionRansomware-FHK!E87136D20396
FireEyeGeneric.mg.e87136d20396db6d
EmsisoftGen:Heur.Pack.Emotet.6 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojanDownloader.Cabby.cns
WebrootW32.Trojan.Gen
AviraHEUR/AGEN.1111823
MicrosoftRansom:Win32/Takabum.A
AegisLabTrojan.Win32.Generic.4!c
GDataGen:Heur.Pack.Emotet.6
TACHYONTrojan-Downloader/W32.Cabby.253440
AhnLab-V3Trojan/Win32.Filecoder.R177242
Acronissuspicious
McAfeeRansomware-FHK!E87136D20396
MAXmalware (ai score=100)
VBA32BScope.TrojanRansom.Foreign
MalwarebytesMalware.AI.787394126
PandaTrj/GdSda.A
TrendMicro-HouseCallRANSOM_CRYPNGB_FC290003.UVPM
RisingRansom.Takabum!8.47FD (CLOUD)
YandexTrojan.DL.Cabby!uhnui75coeM
IkarusTrojan.Win32.Filecoder
FortinetW32/Generic.AC.343C17!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml
Qihoo-360Win32/Ransom.Generic.HwoCEpsA

How to remove Heur.Pack.Emotet.6?

Heur.Pack.Emotet.6 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment