Categories: Malware

About “Heur.Pack.Emotet.6” infection

The Heur.Pack.Emotet.6 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Heur.Pack.Emotet.6 virus can do?

Executable code extraction
Compression (or decompression)
Creates RWX memory
The binary likely contains encrypted or compressed data.
Exhibits possible ransomware file modification behavior
Writes a potential ransom message to disk
Mimics icon used for popular non-executable file format
Creates a known Maktub ransomware decryption instruction / key file.
Anomalous binary characteristics

How to determine Heur.Pack.Emotet.6?


File Info:
crc32: BF8F1491md5: e87136d20396db6da59342011a203111name: E87136D20396DB6DA59342011A203111.mlwsha1: 97c308207a9354ec869f56bd42267c56b48d6c4dsha256: 7887277540f971323a2c823526014136590fbffa3c5e4472de31e3e705459df4sha512: 073f00250bf0d603b82f4adb94881115addda48944761fa2e21a94554021b4f41e2174ac9276788ea20f7bde62ba06f0f56b05178141fdaf8d396c628e871c13ssdeep: 3072:cYOvEC49nmy5fOajnI8gV6sPQkd61tb7iaOXiy8X500m+DZNXCJuSwCufvBufv4:cYmEDmyEajnPu6sujX1SuSwR1type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: (C) 2007-2015  Moo0CompanyName: Moo0PrivateBuild: 1.3.18.2LegalTrademarks: (C) 2007-2015  Moo0Comments: Internally ThreeProductName: Pdu EnvelopeProductVersion: 1.3.18.2FileDescription: Internally ThreeOriginalFilename: Pdu EnvelopeTranslation: 0x0409 0x04b0

Heur.Pack.Emotet.6 also known as:

K7AntiVirus	Trojan ( 0055e3ef1 )
Elastic	malicious (high confidence)
DrWeb	Trojan.Encoder.4343
Cynet	Malicious (score: 100)
CAT-QuickHeal	Ransom.Takabum.S9
ALYac	Gen:Heur.Pack.Emotet.6
Cylance	Unsafe
Zillya	Downloader.Cabby.Win32.1859
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	Ransom:Win32/Takabum.5cf9d980
K7GW	Trojan ( 0055e3ef1 )
Cybereason	malicious.20396d
Symantec	Trojan.Gen.2
ESET-NOD32	Win32/Filecoder.MaktubLocker.A
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	BC.Win.Packer.Troll-14
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Heur.Pack.Emotet.6
NANO-Antivirus	Trojan.Win32.MlwGen.ebfebf
SUPERAntiSpyware	Ransom.Maktub/Variant
MicroWorld-eScan	Gen:Heur.Pack.Emotet.6
Tencent	Malware.Win32.Gencirc.10c0efe7
Ad-Aware	Gen:Heur.Pack.Emotet.6
Comodo	Malware@#1caj4rdda78hr
BitDefenderTheta	Gen:NN.ZexaF.34670.pu0@aG4PE7ai
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	RANSOM_CRYPNGB_FC290003.UVPM
McAfee-GW-Edition	Ransomware-FHK!E87136D20396
FireEye	Generic.mg.e87136d20396db6d
Emsisoft	Gen:Heur.Pack.Emotet.6 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	TrojanDownloader.Cabby.cns
Webroot	W32.Trojan.Gen
Avira	HEUR/AGEN.1111823
Microsoft	Ransom:Win32/Takabum.A
AegisLab	Trojan.Win32.Generic.4!c
GData	Gen:Heur.Pack.Emotet.6
TACHYON	Trojan-Downloader/W32.Cabby.253440
AhnLab-V3	Trojan/Win32.Filecoder.R177242
Acronis	suspicious
McAfee	Ransomware-FHK!E87136D20396
MAX	malware (ai score=100)
VBA32	BScope.TrojanRansom.Foreign
Malwarebytes	Malware.AI.787394126
Panda	Trj/GdSda.A
TrendMicro-HouseCall	RANSOM_CRYPNGB_FC290003.UVPM
Rising	Ransom.Takabum!8.47FD (CLOUD)
Yandex	Trojan.DL.Cabby!uhnui75coeM
Ikarus	Trojan.Win32.Filecoder
Fortinet	W32/Generic.AC.343C17!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/Ransom.Generic.HwoCEpsA