Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-06 01:00:27 UTC
Home > List all groups > List all tools > List all groups using tool Lslsass
 Tool: Lslsass
Names Lslsass
Category Tools
Type Credential stealer
Description
Lslsass is a publicly-available tool that can dump active logon session password hashes
from the lsass process.
Information
MITRE ATT&CK Last change to this tool card: 30 December 2022
Download this tool card in JSON format
All groups using tool Lslsass
Changed Name Country Observed
APT groups
 Comment Crew, APT 1 2006-May 2018
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=459979cc-a0d7-49ae-8a20-5626863aa0d6
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=459979cc-a0d7-49ae-8a20-5626863aa0d6
Page 1 of 1