Home > List all groups > List all tools > List all groups using tool PcExter

Threat Group Cards: A Threat Actor Encyclopedia

Names	PcExter
Category	Malware
Type	Exfiltration
Description	(Kaspersky) This is another uploader used to exfiltrate archive files to Microsoft OneDrive. This tool was distributed as a DLL file named Vspmsg.dll that was executed using the DLL side-loading technique. As a loader, the tool uses a legitimate executable file from Visual Studio, VSPerfCmd, which is used to collect performance data.
Information	<https://securelist.com/toddycat-keep-calm-and-check-logs/110696/>
MITRE ATT&CK	<https://attack.mitre.org/software/S1102>

Last change to this tool card: 19 June 2024

Download this tool card in JSON format

1 group listed (1 APT, 0 other, 0 unknown)

APT groups