Windows Credential Editor — Malware Profile

Windows Credential Editor is a password dumping tool.

MITRE ATT&CK techniques (1)

• T1003.001 LSASS Memory

IntelFusions coverage

• APT39: Iran's Personal Data Harvesting Machine Targets Telecom and Travel Industries for Surveillance Operations 2026-02-16

Attributed threat actors

• BRONZE BUTLER
• APT27
• FIN6
• APT39
• GALLIUM
• APT40
• FIN5

Read the full analysis on IntelFusions