From securityonline.info
Emotet generates their process name from a specific word dictionary and C drive serial. EmoCheck scans the running process on the host, and find Emotet process from their process name.
EmoCheck: Emotet detection tool for Windows OS