Win64/Emotet [Threat Name] go to Threat

Win64/Emotet.AB [Threat Variant Name]

Category trojan
Size 229376 B
Detection created Mar 05, 2018
Detection database version 17007
Aliases Trojan-Banker.Win32.Emotet.acqw (Kaspersky)
  Trojan:Win64/Emotet (Microsoft)
Short description

Win64/Emotet.AB is a trojan that steals sensitive information. The trojan attempts to send gathered information to a remote machine.

Installation

The trojan does not create any copies of itself.

Information stealing

The trojan collects the following information:

  • e-mail addresses
  • computer name
  • volume serial number

The following programs are affected:

  • Microsoft Outlook

The collected information is stored in the following file:

  • %commonappdata%\­%variable%.TMP

A string with variable content is used instead of %variable% .


The trojan attempts to send gathered information to a remote machine.


The trojan contains a list of (3) IP addresses. The HTTP protocol is used in the communication.

Other information

The trojan is probably a part of other malware.

Please enable Javascript to ensure correct displaying of this content and refresh this page.