Fgdump

S0120

Tool.View on attack.mitre.org

About this tool

Fgdump is a Windows password hash dumper.

Techniques used1

Procedure examples1

TechniqueProcedure example
T1003.002
Security Account Manager

Fgdump can dump Windows password hashes.

Groups that use it0

None recorded.

Campaigns0

None recorded.

References1

  1. Mandiant APT1 Open source
    Mandiant. (n.d.). APT1 Exposing One of China’s Cyber Espionage Units. Retrieved July 18, 2016.

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.