Tool: Cachedump

Description

[Cachedump](https://attack.mitre.org/software/S0119) is a publicly-available tool that program extracts cached password hashes from a system’s registry. (Citation: Mandiant APT1)

External References

• mitre-attack
• Mandiant APT1

Techniques Used by This Tool

• T1003.005 — Cached Domain Credentials

APT Groups Using This Tool

• APT1