MalwareBazaar Database
This page shows some basic information the YARA rule Malware_PE_NET_KoiLoader including corresponding malware samples.
Database Entry
| YARA Rule: | Malware_PE_NET_KoiLoader |
|---|---|
| Author: | Serhii Kocherhan |
| Description: | Detects Koi Loader .NET executables packed with Confuser featuring specific mutex, assembly metadata, and unmanaged DLL imports |
| Firstseen: | 2026-09-16 09:47:55 UTC |
| Lastseen: | 2026-09-16 23:10:53 UTC |
| Sightings: | 7 |
Malware Samples
The table below shows all malware samples that matching this particular YARA rule (max 1000).
| Firstseen (UTC) | SHA256 hash | Tags | Signature | Reporter |
|---|