← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Coyote Banking Trojan: A Stealthy Attack via LNK Files | FortiGuard Labs
WHITE CyberHunter_NL 2025-02-04 Modified: 2025-02-04
82
IOCs
HIGH VOLUME
FortiGuard Labs has published an analysis of Coyote Banking Trojan, a malware that targets users in Brazil and targets financial applications and websites to steal sensitive information. £2.5m
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
Coyote Baking Coyote Banking
Indicators of Compromise (12 / 82 total)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain hostname
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 025350adecb9af2cd2cd006407b54210 MD5 of 7cbfbce482071c6df823f09d83c6868d0b1208e8ceb70147b64c52bb8b48bdb8 2025-02-04
FileHash-MD5 13415804bdf213d79b78f3878c026608 MD5 of fd0ef425d34b56d0bc08bd93e6ecb11541bd834b9d4d417187373b17055c862e 2025-02-04
FileHash-MD5 1c2527195339686fc4f9b991983c6b0d MD5 of 839de445f714a32f36670b590eba7fc68b1115b885ac8d689d7b344189521012 2025-02-04
FileHash-MD5 22e2798f79a9effe3587d7de9adc283f MD5 of 330dffe834ebbe4042747bbe00b4575629ba8f2507bccf746763cacf63d655bb 2025-02-04
FileHash-MD5 5d6644e73aaf298c519074df55c926cd MD5 of bea4f753707eba4088e8a51818d9de8e9ad0138495338402f05c5c7a800695a6 2025-02-04
FileHash-MD5 5e9cd60df925f3bf372b4808842dfb4b MD5 of 362af8118f437f9139556c59437544ae1489376dc4118027c24c8d5ce4d84e48 2025-02-04
FileHash-MD5 61954e95475f05dc3f80f4644a4d7e3f MD5 of 64209e2348e6d503ee518459d0487d636639fa5e5298d28093a5ad41390ef6b0 2025-02-04
FileHash-MD5 669ae99bc7fcbc24f2ba23e7bea96706 MD5 of 73ad6be67691b65cee251d098f2541eef3cab2853ad509dac72d8eff5bd85bc0 2025-02-04
FileHash-MD5 ad372e5c91b2c9ed49658272846c0be2 MD5 of 33cba89eeeaf139a798b7fa07ff6919dd0c4c6cf4106b659e4e56f15b5809287 2025-02-04
FileHash-MD5 d2324a53a2be3c861709be446fba5497 MD5 of f3c37b1de5983b30b9ae70c525f97727a56d3874533db1a6e3dc1355bfbf37ec 2025-02-04
FileHash-MD5 d68a4167f875335ab6761fd370263340 MD5 of 552d53f473096c55a3937c8512a06863133a97c3478ad6b1535e1976d1e0d45f 2025-02-04
FileHash-MD5 f164de2af4c4311c3b5d415a446d4a23 MD5 of 67f371a683b2be4c8002f89492cd29d96dceabdbfd36641a27be761ee64605b1 2025-02-04
References (1)
↗ https://www.fortinet.com/blog/threat-research/coyote-banking-trojan-a-stealthy-attack-via-lnk-files