General

  • Target

    Vigo.exe

  • Size

    15.2MB

  • MD5

    2849185e603abb212d7101f4c2a2baf2

  • SHA1

    1fe4f2f64726aca834f5a9a132eb0d201b8ec044

  • SHA256

    ee37896726eab2d001ebb78e1e23866873f45738349d26397e0bff1d9bcfad68

  • SHA512

    726bceb3e040978a5bca83d426ffda0d1e6881224a97ac7b4db53e026ac81eba98d1a84d46a81528cec051d9edcfd2ff774c1b70d42f1abea38c051e2866d96f

  • SSDEEP

    393216:fu7L/sQqTIrdQuslSq99oWOv+9qDgcXw59J:fCL0QuIrdQuSDorvSfcAH

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Vigo.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • Vigo.pyc