Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 13:33:42 UTC
Home > List all groups > List all tools > List all groups using tool Pioneer
 Tool: Pioneer
Names
Pioneer
Virus.Win32.Pioneer.dx
igfxext.exe
Category Malware
Type Dropper
Description
(Kaspersky) This malware is 63kb in size. It is bound to a variety of other software packages
that vary in name, but the host package is consistently detected as “Virus.Win32.Pioneer.dx”.
It drops the igfxext.exe “selective infector” component to disk and runs it.
Information
<https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2018/03/08070903/darkhotel_kl_07.11.pdf>
<https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2018/03/08070901/darkhotelappendixindicators_kl.pdf>
Last change to this tool card: 20 April 2020
Download this tool card in JSON format
All groups using tool Pioneer
Changed Name Country Observed
APT groups
  DarkHotel 2007-2023  
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=d96fa8e0-3e07-42da-ba77-a7153a3ecd8e
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=d96fa8e0-3e07-42da-ba77-a7153a3ecd8e
Page 1 of 1