Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 16:48:52 UTC
Home > List all groups > List all tools > List all groups using tool PcExter
 Tool: PcExter
Names PcExter
Category Malware
Type Exfiltration
Description
(Kaspersky) This is another uploader used to exfiltrate archive files to Microsoft
OneDrive. This tool was distributed as a DLL file named Vspmsg.dll that was executed
using the DLL side-loading technique. As a loader, the tool uses a legitimate executable
file from Visual Studio, VSPerfCmd, which is used to collect performance data.
Information MITRE ATT&CK Last change to this tool card: 19 June 2024
Download this tool card in JSON format
All groups using tool PcExter
Changed Name Country Observed
APT groups
 ToddyCat 2020-2024
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=716cd49c-608b-4e06-82b3-2443ddda8d44
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=716cd49c-608b-4e06-82b3-2443ddda8d44
Page 1 of 1