Wingo malware family
Wingo is a malware family tracked by MalwareAnalyzer by Cyble across 2 publicly analyzed samples. First seen 2026-07-27, most recently 2026-08-26. Observed ATT&CK techniques include T1057, T1112.
Corpus statistics
- Publicly analyzed samples: 2
- First seen: 2026-07-27
- Last seen: 2026-08-26
- Verdicts: malicious 2
- File types: pe 2
ATT&CK techniques used by Wingo
Recent Wingo samples
- b134ee299387002e4bbb37428c563df145b3a3f0ca6f513c8a47876d7e026a09 - malicious (2026-08-26)
- virussign.com_f7bcfe15d404d4c0851ca2e8944b95d0.vir - malicious (2026-07-27)
Frequently asked about Wingo
- What is Wingo?
- Wingo is a malware family tracked by MalwareAnalyzer by Cyble across 2 publicly analyzed samples. First seen 2026-07-27, most recently 2026-08-26. Observed ATT&CK techniques include T1057, T1112.
- How many Wingo samples have been analyzed?
- MalwareAnalyzer by Cyble holds 2 publicly analyzed samples attributed to Wingo, first seen 2026-07-27 and most recently 2026-08-26. This counts public submissions to this platform only, so it is a measure of what we have seen rather than of the family's total prevalence.
- What MITRE ATT&CK techniques does Wingo use?
- Across our Wingo samples the most frequently observed techniques are T1057 (2), T1112 (1). Counts are the number of analyzed samples in which each technique was observed.
- What file types does Wingo use?
- Wingo samples in this corpus are distributed as pe (2).
- Is Wingo malicious?
- 2 of 2 analyzed Wingo samples were scored malicious by the fused verdict, which combines multi-engine static scanning, YARA and hash reputation with behavior captured during real sandbox detonation. Each report lists every signal that contributed to its score.
Latest analyzed threats · ATT&CK coverage across the corpus · Threat trends