Leafminer

ATT&CK ID

G0077

Origin

Iran

Techniques

14

Tools

4

Also tracked as Raspite

Techniques

Resource Development

Obtain Capabilities

Initial Access

Drive-by Compromise

Execution

Command and Scripting Interpreter

Persistence

Create Account

Privilege Escalation

Process Injection

Stealth

Obfuscated Files or InformationProcess Injection

Credential Access

OS Credential DumpingBrute ForceUnsecured CredentialsCredentials from Password Stores

Discovery

Remote System DiscoveryNetwork Service DiscoveryFile and Directory Discovery

Collection

Email Collection

Software

LaZagne · MailSniper · Mimikatz · PsExec

MITRE ATT&CKAll threat actors