Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Overview
overview
8Static
static
1LBOTS_V2_F...IN.zip
windows10-1703-x64
1LBOTS V2 F...ice.js
windows10-1703-x64
8LBOTS V2 F...PC.dll
windows10-1703-x64
1LBOTS V2 F...rs.ini
windows10-1703-x64
1LBOTS V2 F...s.json
windows10-1703-x64
3LBOTS V2 F...ts.exe
windows10-1703-x64
1LBOTS V2 F...ts.exe
windows10-1703-x64
1LBOTS V2 F...ts.pdb
windows10-1703-x64
3LBOTS V2 F...v.json
windows10-1703-x64
3LBOTS V2 F...g.json
windows10-1703-x64
3LBOTS V2 F...on.dll
windows10-1703-x64
1LBOTS V2 F...rs.dll
windows10-1703-x64
1LBOTS V2 F...re.dll
windows10-1703-x64
1LBOTS V2 F...re.pdb
windows10-1703-x64
3LBOTS V2 F...ha.dll
windows10-1703-x64
1LBOTS V2 F...ts.txt
windows10-1703-x64
1LBOTS V2 F...e.json
windows10-1703-x64
3LBOTS V2 F...rp.dll
windows10-1703-x64
1Static task
static1
Behavioral task
behavioral1
Sample
LBOTS_V2_FREE_LOGIN.zip
Resource
win10-20230220-es
Behavioral task
behavioral2
Sample
LBOTS V2 FREE LOGIN/Captcha_Service.js
Resource
win10-20230220-es
Behavioral task
behavioral3
Sample
LBOTS V2 FREE LOGIN/DiscordRPC.dll
Resource
win10-20230220-es
Behavioral task
behavioral4
Sample
LBOTS V2 FREE LOGIN/Headers.ini
Resource
win10-20230220-es
Behavioral task
behavioral5
Sample
LBOTS V2 FREE LOGIN/LBots.deps.json
Resource
win10-20230220-es
Behavioral task
behavioral6
Sample
LBOTS V2 FREE LOGIN/LBots.exe
Resource
win10-20230220-es
Behavioral task
behavioral7
Sample
LBOTS V2 FREE LOGIN/LBots.exe
Resource
win10-20230220-es
Behavioral task
behavioral8
Sample
LBOTS V2 FREE LOGIN/LBots.pdb
Resource
win10-20230220-es
Behavioral task
behavioral9
Sample
LBOTS V2 FREE LOGIN/LBots.runtimeconfig.dev.json
Resource
win10-20230220-es
Behavioral task
behavioral10
Sample
LBOTS V2 FREE LOGIN/LBots.runtimeconfig.json
Resource
win10-20230220-es
Behavioral task
behavioral11
Sample
LBOTS V2 FREE LOGIN/Newtonsoft.Json.dll
Resource
win10-20230220-es
Behavioral task
behavioral12
Sample
LBOTS V2 FREE LOGIN/Sulakore.Generators.dll
Resource
win10-20230220-es
Behavioral task
behavioral13
Sample
LBOTS V2 FREE LOGIN/Sulakore.dll
Resource
win10-20230220-es
Behavioral task
behavioral14
Sample
LBOTS V2 FREE LOGIN/Sulakore.pdb
Resource
win10-20230220-es
Behavioral task
behavioral15
Sample
LBOTS V2 FREE LOGIN/TwoCaptcha.dll
Resource
win10-20230220-es
Behavioral task
behavioral16
Sample
LBOTS V2 FREE LOGIN/accounts.txt
Resource
win10-20230220-es
Behavioral task
behavioral17
Sample
LBOTS V2 FREE LOGIN/cache.json
Resource
win10-20230220-es
Behavioral task
behavioral18
Sample
LBOTS V2 FREE LOGIN/websocket-sharp.dll
Resource
win10-20230220-es
Target
LBOTS_V2_FREE_LOGIN.zip
Size
1.8MB
MD5
54da9a363ddac5217e23b155c1f59faa
SHA1
193763dc06e8d1d0680300046b1c9246a8d0887b
SHA256
df53d5d9fd823812fe6f8da727dda6c5422eb6f10ec45db2325fa0fc2db91684
SHA512
403509983ab1ff5d65e839bb5f23fbcbd3dfe5d3a52beb8640f87e835ac7481d60a3422f4b85472fcc3f137475f5e08605a96ccaf81986ed46b2e1d47e97aa5c
SSDEEP
49152:j2gOKRD/CZIBuYnacM0jAD8n3el/qllYI2rgpqkmgPgLYKRl:jmKRDKZ6XacM0jE83dllYI2rgpqkmgPK
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
FindNextFileW
GetCurrentProcess
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
InitializeCriticalSection
GetEnvironmentVariableW
FindClose
MultiByteToWideChar
GetLastError
GetFileAttributesExW
GetFullPathNameW
GetProcAddress
DeleteCriticalSection
WideCharToMultiByte
IsWow64Process
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EnterCriticalSection
FindFirstFileExW
OutputDebugStringW
LoadLibraryA
GetModuleHandleW
InitializeCriticalSectionAndSpinCount
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
LCMapStringEx
DecodePointer
EncodePointer
InitializeCriticalSectionEx
GetStringTypeW
MessageBoxW
ShellExecuteW
RegOpenKeyExW
RegGetValueW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
RegCloseKey
_invalid_parameter_noinfo_noreturn
_initterm_e
_initterm
_get_initial_wide_environment
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_errno
_register_onexit_function
_initialize_onexit_table
_exit
abort
__p___argc
__p___wargv
_c_exit
terminate
_register_thread_local_exe_atexit_callback
exit
fputwc
__p__commode
_set_fmode
fflush
__stdio_common_vfwprintf
fputws
__acrt_iob_func
__stdio_common_vswprintf
_wfopen
__stdio_common_vsprintf_s
setvbuf
free
calloc
_set_new_mode
_callnewh
malloc
wcsncmp
_wcsdup
strcspn
strcpy_s
wcsnlen
wcstoul
_wtoi
localeconv
___mb_cur_max_func
_lock_locales
___lc_codepage_func
___lc_locale_name_func
__pctype_func
setlocale
_configthreadlocale
_unlock_locales
frexp
__setusermatherr
_time64
_gmtime64
wcsftime
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ