MITRE ATT&CK / Software / S0119

Cachedump

ID: S0119
Type: Tool
Platforms: Windows
Source: attack.mitre.org
MITRE last modified: 25 Apr 2025

Cachedump is a publicly-available tool that program extracts cached password hashes from a system’s registry. ^[1]

Techniques used (1)

T1003.005 Cached Domain Credentials

Groups using it (1)

G0006 APT1

References

Mandiant APT1