MITRE ATT&CKsoftware (tool)

S0005 Windows Credential Editor

Published 2017-05-31 Modified 2024-09-12 Official page ↗

Domain: enterprise
Platforms: Windows
Aliases: WCE
Version: 1.1
Created: 2017-05-31

Description

Windows Credential Editor is a password dumping tool.

Related

Uses · MITRE ATT&CK (1)

T1003.001 LSASS Memory sub-technique

Referenced by MITRE ATT&CK · uses (7)

G0093 GALLIUM group
G0087 APT39 group
G0065 Leviathan group
G0053 FIN5 group
G0060 BRONZE BUTLER group
G0027 Threat Group-3390 group
G0037 FIN6 group

References

https://web.archive.org/web/20240904163410/https://www.ampliasecurity.com/research/wcefaq.html Amplia WCE