Home > List all groups > List all tools > List all groups using tool ProcDump

Threat Group Cards: A Threat Actor Encyclopedia

Names	ProcDump
Category	Tools
Type	Credential stealer
Description	ProcDump is a command-line utility whose primary purpose is monitoring an application for CPU spikes and generating crash dumps during a spike that an administrator or developer can use to determine the cause of the spike. ProcDump also includes hung window monitoring (using the same definition of a window hang that Windows and Task Manager use), unhandled exception monitoring and can generate dumps based on the values of system performance counters. It also can serve as a general process dump utility that you can embed in other scripts. Part of SysInternals.
Information	<https://docs.microsoft.com/en-us/sysinternals/downloads/procdump>

Last change to this tool card: 20 April 2020

Download this tool card in JSON format

Changed	Name	Country	Observed
APT groups
	↳ Subgroup: Scattered Spider	[Unknown]	2022-Jul 2024
	Antlion		2011
	APT 20, Violin Panda		2014-2017
	Comment Crew, APT 1		2006-May 2018
	Dalbit		2022
	Emissary Panda, APT 27, LuckyMouse, Bronze Union		2010-Aug 2023
	FamousSparrow	[Unknown]	2019
	FIN13	[Unknown]	2016
	GhostEmperor		2020-Sep 2024
	Goblin Panda, Cycldek, Conimes		2013-Jun 2020
	Hydrochasma	[Unknown]	2022
	IAmTheKing		2018
	Ke3chang, Vixen Panda, APT 15, GREF, Playful Dragon		2010-Late 2022
	Kimsuky, Velvet Chollima		2012-Sep 2024
	Lazarus Group, Hidden Cobra, Labyrinth Chollima		2007-Sep 2024
	Operation Harvest		2016
	Sofacy, APT 28, Fancy Bear, Sednit		2004-Sep 2024
	TaskMasters		2010-May 2021
	UNC215		2019
Other groups
	Parinacota	[Unknown]	2018

20 groups listed (19 APT, 1 other, 0 unknown)

APT groups