Dump LSASS credentials using MimiKatz

/static/assets/windows-logo.svg
Download and install powershell script that can be used to pull MimiKatz from Operator and execute a "sekurlsa::logonpasswords". menuPass has used mimikatz.exe to dump credentials locally using the CMD option.
locked
View Command

To view this TTPs command, you must be logged in with a professional or enterprise license.

Login

Test this TTP

Download Operator (1.7.1)
Test this TTP using one of our Operator chains
Is my host protected against Cuba Ransomware?

2022-12-27

/static/assets/windows-logo.svg
Stage and execute Cuba Ransomware.