ETDA สำนักงานพัฒนาธุรกรรมทางอิเล็กทรอนิกส์
Electronic Transactions Development Agency
Report
Search
Home > List all groups > List all tools > List all groups using tool PcExter

Threat Group Cards: A Threat Actor Encyclopedia

Permanent link Tool: PcExter

NamesPcExter
CategoryMalware
TypeExfiltration
Description(Kaspersky) This is another uploader used to exfiltrate archive files to Microsoft OneDrive. This tool was distributed as a DLL file named Vspmsg.dll that was executed using the DLL side-loading technique. As a loader, the tool uses a legitimate executable file from Visual Studio, VSPerfCmd, which is used to collect performance data.
Information<https://securelist.com/toddycat-keep-calm-and-check-logs/110696/>

Last change to this tool card: 23 April 2024

Download this tool card in JSON format

Previous: PCClient
Next: PCHUNTER

All groups using tool PcExter

ChangedNameCountryObserved

APT groups

XToddyCatChina2020-2021 

1 group listed (1 APT, 0 other, 0 unknown)

Digital Service Security Center
Electronic Transactions Development Agency

Follow us on

Facebook Twitter

Report incidents

Telephone +66 (0)2-123-1227
E-mail [email protected]