General
-
Target
pIGI+ 2.2.6.msi
-
Size
114.3MB
-
Sample
230328-kd1xhsbf4s
-
MD5
327b69c02a8283fed8d634b118baf20a
-
SHA1
09f06c814bc6d356a50fe86441769a31beb159d9
-
SHA256
d064edcda9fb79bec9fc86b03a4f6412736d955017822c631ad4275c9b0426aa
-
SHA512
63c40c0ed5aadd21c3de917bec4aa7c401991f3a085826794457ddd17e4b46e93680dcbda23f2d364250b9eb3a80ea0747e54006c6bf3b0c43202d788b6653a9
-
SSDEEP
3145728:SrwuzhAup25Be1TFyCIlU5HlBRW7ci/Kgpqh:aTuheDGlWljW7ci/Bqh
Static task
static1
Behavioral task
behavioral1
Sample
pIGI+ 2.2.6.msi
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
pIGI+ 2.2.6.msi
-
Size
114.3MB
-
MD5
327b69c02a8283fed8d634b118baf20a
-
SHA1
09f06c814bc6d356a50fe86441769a31beb159d9
-
SHA256
d064edcda9fb79bec9fc86b03a4f6412736d955017822c631ad4275c9b0426aa
-
SHA512
63c40c0ed5aadd21c3de917bec4aa7c401991f3a085826794457ddd17e4b46e93680dcbda23f2d364250b9eb3a80ea0747e54006c6bf3b0c43202d788b6653a9
-
SSDEEP
3145728:SrwuzhAup25Be1TFyCIlU5HlBRW7ci/Kgpqh:aTuheDGlWljW7ci/Bqh
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-