PcExter

Description

(Kaspersky) This is another uploader used to exfiltrate archive files to Microsoft OneDrive. This tool was distributed as a DLL file named Vspmsg.dll that was executed using the DLL side-loading technique. As a loader, the tool uses a legitimate executable file from Visual Studio, VSPerfCmd, which is used to collect performance data.

Names

Name
PcExter

Category

Malware

Type

  • Exfiltration

Information

Mitre Attack

Other Information

Uuid

716cd49c-608b-4e06-82b3-2443ddda8d44

Last Card Change

2024-06-19