Overview

overview

10

Static

static

3

Leeqez Cra...TY.exe

windows10-2004-x64

10

Resubmissions

29/07/2026, 23:24

260729-3dt33sgg23

29/07/2026, 23:21

260729-3b7amahn3110

Sharing

Copy URL Twitter E-mail

General

  • Target
    Leeqez Cracked by @ntpx.zip
  • Size 6.1MB
  • Sample260729-3b7amahn31
  • SHA256 cefecb648d511972209d8aaea70c071636c17d650bd87ff76da5e01f8846107f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
defense_evasionevasionexecutionpersistenceprivilege_escalationtrojan

Malware Config

Targets

    • Target
      Leeqez Cracked by @ntpx/LEEQEZ PREMIUM TWEAKING UTILITY.exe
    • Size 79KB
    • SHA256 c4f1244546720ccc5cc91be16c6991a50031e3cf5b1c1178b9ecde561a900295
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    defense_evasionevasionexecutionpersistenceprivilege_escalationtrojan

    • Modifies Windows Defender DisableAntiSpyware settings

      evasiontrojan

    • Stops running service(s)

      defense_evasionexecution

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Power Settings

      powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.

      persistence

    • Command and Scripting Interpreter: PowerShell

      Start PowerShell.

      execution

    • Executes a VBScript file via the Windows Script Host.

      execution
    behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

4
T1059

PowerShell

1
T1059.001

Visual Basic

1
T1059.005

Windows Command Shell

1
T1059.003

System Services

1
T1569

Service Execution

1
T1569.002

Persistence

Create or Modify System Process

2
T1543

Windows Service

2
T1543.003

Event Triggered Execution

1
T1546

Netsh Helper DLL

1
T1546.007

Power Settings

1
T1653

Privilege Escalation

Create or Modify System Process

2
T1543

Windows Service

2
T1543.003

Event Triggered Execution

1
T1546

Netsh Helper DLL

1
T1546.007

Defense Evasion

Impair Defenses

2
T1562

Disable or Modify Tools

1
T1562.001

Modify Registry

1
T1112

Credential Access

Discovery

Peripheral Device Discovery

1
T1120

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

1
T1489

Tasks