ProcDump — Malware Profile

Sysinternals memory-dump utility abused to dump LSASS for credential theft.

IntelFusions coverage

• U.S. and Allied Agencies Warn of North Korean Andariel Espionage Campaign Targeting Defense and Nuclear Sectors 2026-02-16
• APT39: Iran's Personal Data Harvesting Machine Targets Telecom and Travel Industries for Surveillance Operations 2026-02-16

Attributed threat actors

• PYSA machine-inferred link
• HAFNIUM machine-inferred link
• Andariel machine-inferred link
• 8Base machine-inferred link
• Head Mare machine-inferred link

Read the full analysis on IntelFusions