Netskope Threat Labs

LsassDump

ATP Sandbox Adv. HeuristicsAV

LsassDump is a detection name for tools that dump credentials from the LSASS process.

First seen
March 2024
Last seen
October 2026
Lsassdump
Alert Name
ByteCode-MSIL.Trojan.LsassDump
Dropped:Generic.LsassDump.E.2C28807C
Dump:Generic.LsassDump.E.41E3D000
Generic.LsassDump.E.167596B2
Generic.LsassDump.E.4D01D71E
Generic.LsassDump.E.590923EC
Generic.LsassDump.E.B0BEF4D1
Generic.LsassDump.E.EC6C23B0
Generic.Trojan.LsassDump.B.04848342
Generic.Trojan.LsassDump.B.1A2C8A82