Overview

overview

4

Static

static

4

GrowCastle...in.zip

windows7-x64

1

GrowCastle...in.zip

windows10-2004-x64

1

GrowCastle...ignore

windows7-x64

3

GrowCastle...ignore

windows10-2004-x64

3

GrowCastle...64.rar

windows7-x64

1

GrowCastle...64.rar

windows10-2004-x64

1

GrowCastle...re.dll

windows7-x64

1

GrowCastle...re.dll

windows10-2004-x64

1

GrowCastle...ui.dll

windows7-x64

1

GrowCastle...ui.dll

windows10-2004-x64

1

GrowCastle...ts.dll

windows7-x64

1

GrowCastle...ts.dll

windows10-2004-x64

1

GrowCastle...DME.md

windows7-x64

3

GrowCastle...DME.md

windows10-2004-x64

3

GrowCastle...nn.cms

windows7-x64

3

GrowCastle...nn.cms

windows10-2004-x64

3

GrowCastle...gs.txt

windows7-x64

1

GrowCastle...gs.txt

windows10-2004-x64

1

GrowCastle...gc.exe

windows7-x64

1

GrowCastle...gc.exe

windows10-2004-x64

1

GrowCastle...st.txt

windows7-x64

1

GrowCastle...st.txt

windows10-2004-x64

1

GrowCastle...cs.txt

windows7-x64

1

GrowCastle...cs.txt

windows10-2004-x64

1

GrowCastle...e.docx

windows7-x64

4

GrowCastle...e.docx

windows10-2004-x64

1

GrowCastle...de.pdf

windows7-x64

3

GrowCastle...de.pdf

windows10-2004-x64

3

GrowCastle...ng.txt

windows7-x64

1

GrowCastle...ng.txt

windows10-2004-x64

1

GrowCastle...it.txt

windows7-x64

1

GrowCastle...it.txt

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    GrowCastleAutobot-main.zip

  • Size

    39.0MB

  • MD5

    f71c3ffd761af0ce39c4cc6fe3db5019

  • SHA1

    4f2b338b9fc358684d7577698ea2d57dc2cad477

  • SHA256

    13483dc0f61d29683c45092618e98775462e5f68805de9931a5802b05ddda5fc

  • SHA512

    f663479ac14b83b5f6b97067a76f55de3718407102fa63f622991ad4bdb124862ade4e29acd02b4c374a7a48cd1b0fe506c37fb1ec808e75ccd8c38d3ff9994a

  • SSDEEP

    786432:iXlErsmjHUOy2xYTSLSHdIQummcJpt5UFv17dHigw76uLxYUgNuMR:iVXjOy2xSOJQvLb5anCgw76ixYbFR

Score
4/10
pdflink

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

    pdflink
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink
  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • GrowCastleAutobot-main.zip
    .zip
  • GrowCastleAutobot-main/.gitignore
  • GrowCastleAutobot-main/Clickermann v4.13 x64.rar
    .rar
  • Clickermann v4.13 x64/Clickermann.exe
    .exe windows:5 windows x64 arch:x64

    6b9eeadf54ed40bbb93b3fc7e873f195


    Headers

    Imports

    Sections

  • Clickermann v4.13 x64/backup.cms
  • Clickermann v4.13 x64/data/config.ini
  • Clickermann v4.13 x64/data/config_editor.ini
  • Clickermann v4.13 x64/data/const.txt
  • Clickermann v4.13 x64/data/history.txt
  • Clickermann v4.13 x64/data/history_editor.txt
  • Clickermann v4.13 x64/data/keywords.txt
  • Clickermann v4.13 x64/data/lang/en/gui.txt
  • Clickermann v4.13 x64/data/lang/en/qinsert_menu.txt
  • Clickermann v4.13 x64/data/lang/en/templates/for.txt
  • Clickermann v4.13 x64/data/lang/en/templates/if_else.txt
  • Clickermann v4.13 x64/data/lang/en/templates/if_pixel_in.txt
  • Clickermann v4.13 x64/data/lang/en/templates/sub.txt
  • Clickermann v4.13 x64/data/lang/ru/gui.txt
  • Clickermann v4.13 x64/data/lang/ru/qinsert_menu.txt
  • Clickermann v4.13 x64/data/lang/ru/templates/ISKEYDOWN
  • Clickermann v4.13 x64/data/lang/ru/templates/Log
  • Clickermann v4.13 x64/data/lang/ru/templates/SUB
  • Clickermann v4.13 x64/data/lang/ru/templates/SUB с параметрами
  • Clickermann v4.13 x64/data/lang/ru/templates/Графика/COLORMODE
  • Clickermann v4.13 x64/data/lang/ru/templates/Графика/COLORMODE (Простой способ делать снимки)
  • Clickermann v4.13 x64/data/lang/ru/templates/Графика/IF_PICTURE_IN
  • Clickermann v4.13 x64/data/lang/ru/templates/Графика/IF_PIXEL_IN
  • Clickermann v4.13 x64/data/lang/ru/templates/Графика/PXL
  • Clickermann v4.13 x64/data/lang/ru/templates/Графика/PXLREPLACE
  • Clickermann v4.13 x64/data/lang/ru/templates/Графика/SCANPICTURE
  • Clickermann v4.13 x64/data/lang/ru/templates/Графика/SCANPICTURE (пример)
  • Clickermann v4.13 x64/data/lang/ru/templates/Графика/SCANPXL
  • Clickermann v4.13 x64/data/lang/ru/templates/Графика/SCANPXL (пример)
  • Clickermann v4.13 x64/data/lang/ru/templates/Графика/Ожидание картинки
  • Clickermann v4.13 x64/data/lang/ru/templates/Графика/Ожидание картинки с таймером
  • Clickermann v4.13 x64/data/lang/ru/templates/Графика/Ожидание цвета
  • Clickermann v4.13 x64/data/lang/ru/templates/Графика/Ожидание цвета IF_PIXEL_IN
  • Clickermann v4.13 x64/data/lang/ru/templates/Комбинации клавиш/Alt+
  • Clickermann v4.13 x64/data/lang/ru/templates/Комбинации клавиш/Ctrl+
  • Clickermann v4.13 x64/data/lang/ru/templates/Комбинации клавиш/Ctrl+C
  • Clickermann v4.13 x64/data/lang/ru/templates/Комбинации клавиш/Ctrl+V
  • Clickermann v4.13 x64/data/lang/ru/templates/Комбинации клавиш/Ctrl+X
  • Clickermann v4.13 x64/data/lang/ru/templates/Комбинации клавиш/KeyDown + KeyUp
  • Clickermann v4.13 x64/data/lang/ru/templates/Комбинации клавиш/LDown + LUp
  • Clickermann v4.13 x64/data/lang/ru/templates/Комбинации клавиш/Shift+
  • Clickermann v4.13 x64/data/lang/ru/templates/Ожидание времени
  • Clickermann v4.13 x64/data/lang/ru/templates/Переключатель
  • Clickermann v4.13 x64/data/lang/ru/templates/Убить процесс
  • Clickermann v4.13 x64/data/lang/ru/templates/Циклы, условия/FOR
  • Clickermann v4.13 x64/data/lang/ru/templates/Циклы, условия/IF
  • Clickermann v4.13 x64/data/lang/ru/templates/Циклы, условия/IF_ELSE
  • Clickermann v4.13 x64/data/lang/ru/templates/Циклы, условия/SWITCH
  • Clickermann v4.13 x64/data/lang/ru/templates/Циклы, условия/THREAD - Поток
  • Clickermann v4.13 x64/data/lang/ru/templates/Циклы, условия/WHILE
  • Clickermann v4.13 x64/data/lang/ru/templates/Циклы, условия/Вывод массива в лог
  • Clickermann v4.13 x64/data/lang/ru/templates/Циклы, условия/Ожидание + таймаут
  • Clickermann v4.13 x64/data/lang/ru/templates/Циклы, условия/Условие с таймером
  • Clickermann v4.13 x64/data/pause.bmp
  • Clickermann v4.13 x64/data/play.bmp
  • Clickermann v4.13 x64/data/rec.bmp
  • Clickermann v4.13 x64/data/sound/error.wav
  • Clickermann v4.13 x64/data/sound/load.wav
  • Clickermann v4.13 x64/data/sound/pause.wav
  • Clickermann v4.13 x64/data/sound/play.wav
  • Clickermann v4.13 x64/data/sound/record.wav
  • Clickermann v4.13 x64/data/sound/silence.wav
  • Clickermann v4.13 x64/data/sound/stop.wav
  • Clickermann v4.13 x64/help.chm
    .chm
  • Clickermann v4.13 x64/ioport.dll
    .dll windows:4 windows x64 arch:x64

    e3492ab84389ec220c847d561b8eb7cd


    Headers

    Imports

    Exports

    Sections

  • Clickermann v4.13 x64/projects/if_picture_in/main.cms
  • Clickermann v4.13 x64/projects/if_picture_in/shit.bmp
  • Clickermann v4.13 x64/projects/test_big/LogPass.txt
  • Clickermann v4.13 x64/projects/test_big/Test.bmp
  • Clickermann v4.13 x64/projects/test_big/Большой тест.cms
  • Clickermann v4.13 x64/Форум техподдержки.url
    .url
  • GrowCastleAutobot-main/Qt6Core.dll
    .dll windows:4 windows x64 arch:x64

    05740f58d01cfd922886e979471b00c7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GrowCastleAutobot-main/Qt6Gui.dll
    .dll windows:4 windows x64 arch:x64

    798aa7d9a218229b287a8bb59af8a03c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GrowCastleAutobot-main/Qt6Widgets.dll
    .dll windows:4 windows x64 arch:x64

    9d838fedaf6cdfafebb25d61d0dd19c4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GrowCastleAutobot-main/README.md
  • GrowCastleAutobot-main/__open_in_clickermann.cms
  • GrowCastleAutobot-main/_main_settings.txt
  • GrowCastleAutobot-main/clickergc.exe
    .exe windows:4 windows x64 arch:x64

    961b475d86d8c9a074842f3ff1519290


    Headers

    Imports

    Sections

  • GrowCastleAutobot-main/colorlist.txt
  • GrowCastleAutobot-main/dungeon_statistics.txt
  • GrowCastleAutobot-main/gcAutobot_guide.docx
    .docx office2007
  • GrowCastleAutobot-main/gcAutobot_guide.pdf
    .pdf

    • https://github.com/Silpux/GrowCastleAutobot

    • https://github.com/Silpux/GrowCastleAutoboten-US-

    • https://www.bignox.com/

    • https://www.bignox.com/en-US

  • GrowCastleAutobot-main/gc_bot_compiling.txt
  • GrowCastleAutobot-main/gc_bot_init.txt
  • GrowCastleAutobot-main/gc_bot_lib.txt
  • GrowCastleAutobot-main/gc_bot_main.txt
  • GrowCastleAutobot-main/gc_bot_mouseMovement.txt
  • GrowCastleAutobot-main/gc_bot_settings.txt
  • GrowCastleAutobot-main/gc_bot_solvecaptcha.txt
  • GrowCastleAutobot-main/libgcc_s_seh-1.dll
    .dll windows:4 windows x64 arch:x64

    8142ee0f45e10ebbff675b18dc67c93c


    Headers

    Imports

    Exports

    Sections

  • GrowCastleAutobot-main/libstdc++-6.dll
    .dll windows:4 windows x64 arch:x64

    a4cad646a5b4cb6747fd2fb039afd431


    Headers

    Imports

    Exports

    Sections

  • GrowCastleAutobot-main/libwinpthread-1.dll
    .dll windows:4 windows x64 arch:x64

    d5ece460ec782e0a1d454029562a8923


    Headers

    Imports

    Exports

    Sections

  • GrowCastleAutobot-main/opencv_world490.dll
    .dll windows:6 windows x64 arch:x64

    91ed45288888313675c2c30707f8c0fe


    Headers

    Imports

    Exports

    Sections

  • GrowCastleAutobot-main/platforms/qwindows.dll
    .dll windows:4 windows x64 arch:x64

    c1aeb8c3e22df04cc4bf817322662378


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GrowCastleAutobot-main/slpx.exe
    .exe windows:6 windows x64 arch:x64

    19773296fd57627431f0914d3590c3f7


    Headers

    Imports

    Sections

  • GrowCastleAutobot-main/solver.dll
    .dll windows:6 windows x64 arch:x64

    b154859e04ab1bb1707fdaad15b5ec55


    Headers

    Imports

    Exports

    Sections

  • GrowCastleAutobot-main/styles/qwindowsvistastyle.dll
    .dll windows:4 windows x64 arch:x64

    6776c0b6ff44669a4602faa1d3ed5c25


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GrowCastleAutobot-main/timerx3spd.txt
  • GrowCastleAutobot-main/unused_functions.txt
  • GrowCastleAutobot-main/wndpos.txt