PcExter
Description
(Kaspersky) This is another uploader used to exfiltrate archive files to Microsoft OneDrive. This tool was distributed as a DLL file named Vspmsg.dll that was executed using the DLL side-loading technique. As a loader, the tool uses a legitimate executable file from Visual Studio, VSPerfCmd, which is used to collect performance data.
Names
Name |
---|
PcExter |
Category
Malware
Type
- Exfiltration
Information
Mitre Attack
Other Information
Uuid
716cd49c-608b-4e06-82b3-2443ddda8d44
Last Card Change
2024-06-19