EmoCrash helped various av-solutions against Emotet malware..

[polonus]

Re: https://www.binarydefense.com/emocrash-exploiting-a-vulnerability-in-emotet-malware-for-defense/
(source credits go to Binairy Defense James Quinn.
Checking the “Install marker” helped to defend against this malware installer.

polonus