MITRE ATT&CKgroup

G0077 Leafminer

Published 2018-10-17 Modified 2026-07-31 Official page ↗
Domain
enterprise
Aliases
Raspite
Version
2.4
Created
2018-10-17

Description

Leafminer is an Iranian threat group that has targeted government organizations and business entities in the Middle East since at least early 2017.

Related

Uses · MITRE ATT&CK (21)

  • T1027.010 Command Obfuscation sub-technique
  • T1588.002 Tool sub-technique
  • T1059.007 JavaScript sub-technique
  • T1003.004 LSA Secrets sub-technique
  • T1003.005 Cached Domain Credentials sub-technique
  • T1114.002 Remote Email Collection sub-technique
  • T1555.003 Credentials from Web Browsers sub-technique
  • T1003.001 LSASS Memory sub-technique
  • T1110.003 Password Spraying sub-technique
  • T1555 Credentials from Password Stores technique
  • T1552.001 Credentials In Files sub-technique
  • T1136.001 Local Account sub-technique
  • T1055.013 Process Doppelgänging sub-technique
  • S0413 MailSniper software (tool)
  • S0349 LaZagne software (tool)
  • T1189 Drive-by Compromise technique
  • S0002 Mimikatz software (tool)
  • S0029 PsExec software (tool)
  • T1018 Remote System Discovery technique
  • T1046 Network Service Discovery technique
  • T1083 File and Directory Discovery technique

References