ATT&CKcon 5.0 returns October 22-23, 2024 in McLean, VA. Stay tuned for registration details!
pwdump
ID: S0006
ⓘ
Type: TOOL
ⓘ
Platforms: Windows
Version: 1.1
Created: 31 May 2017
Last Modified: 13 August 2020
Techniques Used
| Domain | ID | Name | Use | |
|---|---|---|---|---|
| Enterprise | T1003 | .002 | OS Credential Dumping: Security Account Manager | |
Groups That Use This Software
| ID | Name | References |
|---|---|---|
| G0087 | APT39 | |
| G0045 | menuPass | |
| G0053 | FIN5 | |
| G0096 | APT41 | |
| G0006 | APT1 | |
| G0027 | Threat Group-3390 |
References
- Wikipedia. (2007, August 9). pwdump. Retrieved June 22, 2016.
- Symantec. (2018, February 28). Chafer: Latest Attacks Reveal Heightened Ambitions. Retrieved May 22, 2020.
- PwC and BAE Systems. (2017, April). Operation Cloud Hopper: Technical Annex. Retrieved April 13, 2017.
- Bromiley, M. and Lewis, P. (2016, October 7). Attacking the Hospitality and Gaming Industries: Tracking an Attacker Around the World in 7 Years. Retrieved October 6, 2017.
- Fraser, N., et al. (2019, August 7). Double DragonAPT41, a dual espionage and cyber crime operation APT41. Retrieved September 23, 2019.
- Mandiant. (n.d.). APT1 Exposing One of China’s Cyber Espionage Units. Retrieved July 18, 2016.
- Falcone, R. and Lancaster, T. (2019, May 28). Emissary Panda Attacks Middle East Government Sharepoint Servers. Retrieved July 9, 2019.