General

  • Target

    ai.rar

  • Size

    47.4MB

  • MD5

    cac7b42d404150d27a0abf07a009fb51

  • SHA1

    855a7468e28f63f15fb54d64bf9ef3ab28eb51af

  • SHA256

    a5b87cd042cc3dc96a3616a3b87871529e708807573ad7c31f4e50fd4f1707d4

  • SHA512

    bc996206fe0ab6e18792132409453025f2df7c928a7fcab2edef2629b6e2133e5fc778df32d9a8ac1e00cbf12ab02bdf58d1a519de0930b8efe18e544e2a87ab

  • SSDEEP

    786432:wRzUHf+8AECqY9Rirv8pPavEzc44pTmgIO79HsjUPJ0fe33xH8JF5d3LJxtu9xr:wBQG8dCzRcvKPavEzcrHIUymHxcJnd7a

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family

Files

  • ai.rar
    .rar
  • ai/.eslintignore
  • ai/.eslintrc.js
  • ai/.git-blame-ignore-revs
  • ai/.git/HEAD
  • ai/.git/config
  • ai/.git/description
  • ai/.git/hooks/applypatch-msg.sample
    .sh linux
  • ai/.git/hooks/commit-msg.sample
    .sh linux
  • ai/.git/hooks/fsmonitor-watchman.sample
    .sh linux
  • ai/.git/hooks/post-update.sample
    .sh linux
  • ai/.git/hooks/pre-applypatch.sample
    .sh linux
  • ai/.git/hooks/pre-commit.sample
    .sh linux
  • ai/.git/hooks/pre-merge-commit.sample
    .sh linux
  • ai/.git/hooks/pre-push.sample
    .sh linux
  • ai/.git/hooks/pre-rebase.sample
    .sh linux
  • ai/.git/hooks/pre-receive.sample
    .sh linux
  • ai/.git/hooks/prepare-commit-msg.sample
    .sh linux
  • ai/.git/hooks/push-to-checkout.sample
    .sh linux
  • ai/.git/hooks/sendemail-validate.sample
    .sh linux
  • ai/.git/hooks/update.sample
    .sh linux
  • ai/.git/index
  • ai/.git/info/exclude
  • ai/.git/logs/HEAD
  • ai/.git/logs/refs/heads/master
  • ai/.git/logs/refs/remotes/origin/HEAD
  • ai/.git/objects/pack/pack-3115620ace1aa23ca1321c210b78b36f1d271a78.idx
  • ai/.git/objects/pack/pack-3115620ace1aa23ca1321c210b78b36f1d271a78.pack
  • ai/.git/objects/pack/pack-3115620ace1aa23ca1321c210b78b36f1d271a78.rev
  • ai/.git/packed-refs
  • ai/.git/refs/heads/master
  • ai/.git/refs/remotes/origin/HEAD
  • ai/.github/ISSUE_TEMPLATE/bug_report.yml
  • ai/.github/ISSUE_TEMPLATE/config.yml
  • ai/.github/ISSUE_TEMPLATE/feature_request.yml
  • ai/.github/pull_request_template.md
  • ai/.github/workflows/on_pull_request.yaml
  • ai/.github/workflows/run_tests.yaml
  • ai/.github/workflows/warns_merge_master.yml
  • ai/.gitignore
  • ai/.pylintrc
  • ai/CHANGELOG.md
  • ai/CITATION.cff
  • ai/CODEOWNERS
  • ai/LICENSE.txt
  • ai/README.md
  • ai/configs/alt-diffusion-inference.yaml
  • ai/configs/instruct-pix2pix.yaml
  • ai/configs/v1-inference.yaml
  • ai/configs/v1-inpainting-inference.yaml
  • ai/environment-wsl2.yaml
  • ai/extensions-builtin/LDSR/ldsr_model_arch.py
  • ai/extensions-builtin/LDSR/preload.py
  • ai/extensions-builtin/LDSR/scripts/ldsr_model.py
  • ai/extensions-builtin/LDSR/sd_hijack_autoencoder.py
  • ai/extensions-builtin/LDSR/sd_hijack_ddpm_v1.py
  • ai/extensions-builtin/LDSR/vqvae_quantize.py
  • ai/extensions-builtin/Lora/extra_networks_lora.py
  • ai/extensions-builtin/Lora/lora.py
  • ai/extensions-builtin/Lora/lora_patches.py
  • ai/extensions-builtin/Lora/lyco_helpers.py
  • ai/extensions-builtin/Lora/network.py
  • ai/extensions-builtin/Lora/network_full.py
  • ai/extensions-builtin/Lora/network_hada.py
  • ai/extensions-builtin/Lora/network_ia3.py
  • ai/extensions-builtin/Lora/network_lokr.py
  • ai/extensions-builtin/Lora/network_lora.py
  • ai/extensions-builtin/Lora/network_norm.py
  • ai/extensions-builtin/Lora/networks.py
  • ai/extensions-builtin/Lora/preload.py
  • ai/extensions-builtin/Lora/scripts/lora_script.py
  • ai/extensions-builtin/Lora/ui_edit_user_metadata.py
  • ai/extensions-builtin/Lora/ui_extra_networks_lora.py
  • ai/extensions-builtin/ScuNET/preload.py
  • ai/extensions-builtin/ScuNET/scripts/scunet_model.py
  • ai/extensions-builtin/ScuNET/scunet_model_arch.py
  • ai/extensions-builtin/SwinIR/preload.py
  • ai/extensions-builtin/SwinIR/scripts/swinir_model.py
  • ai/extensions-builtin/SwinIR/swinir_model_arch.py
  • ai/extensions-builtin/SwinIR/swinir_model_arch_v2.py
  • ai/extensions-builtin/canvas-zoom-and-pan/javascript/zoom.js
    .js
  • ai/extensions-builtin/canvas-zoom-and-pan/scripts/hotkey_config.py
  • ai/extensions-builtin/canvas-zoom-and-pan/style.css
  • ai/extensions-builtin/extra-options-section/scripts/extra_options_section.py
  • ai/extensions-builtin/mobile/javascript/mobile.js
    .js
  • ai/extensions-builtin/prompt-bracket-checker/javascript/prompt-bracket-checker.js
    .js
  • ai/html/card-no-preview.png
    .png
  • ai/html/extra-networks-card.html
  • ai/html/extra-networks-no-cards.html
  • ai/html/footer.html
  • ai/html/licenses.html
    .html
  • ai/javascript/aspectRatioOverlay.js
    .js
  • ai/javascript/contextMenus.js
    .js
  • ai/javascript/dragdrop.js
    .js
  • ai/javascript/edit-attention.js
    .js
  • ai/javascript/edit-order.js
    .js
  • ai/javascript/extensions.js
    .js
  • ai/javascript/extraNetworks.js
    .js
  • ai/javascript/generationParams.js
    .js
  • ai/javascript/hints.js
    .js
  • ai/javascript/hires_fix.js
    .js
  • ai/javascript/imageMaskFix.js
  • ai/javascript/imageviewer.js
    .js
  • ai/javascript/imageviewerGamepad.js
    .js
  • ai/javascript/inputAccordion.js
    .js
  • ai/javascript/localStorage.js
    .js
  • ai/javascript/localization.js
    .js
  • ai/javascript/notification.js
    .js
  • ai/javascript/profilerVisualization.js
    .js
  • ai/javascript/progressbar.js
    .js
  • ai/javascript/resizeHandle.js
    .js
  • ai/javascript/textualInversion.js
    .js
  • ai/javascript/token-counters.js
    .js
  • ai/javascript/ui.js
    .js
  • ai/javascript/ui_settings_hints.js
    .js
  • ai/launch.py
  • ai/models/VAE-approx/model.pt
    .zip
  • model/data.pkl
  • model/data/0
  • model/data/1
  • model/data/10
  • model/data/11
  • model/data/12
  • model/data/13
  • model/data/14
  • model/data/15
  • model/data/2
  • model/data/3
  • model/data/4
  • model/data/5
  • model/data/6
  • model/data/7
  • model/data/8
  • model/data/9
  • model/version
  • ai/models/karlo/ViT-L-14_stats.th
    .zip
  • archive/data.pkl
  • archive/data/0
  • archive/data/1
  • archive/version
  • ai/modules/Roboto-Regular.ttf
  • ai/modules/api/api.py
  • ai/modules/api/models.py
  • ai/modules/cache.py
  • ai/modules/call_queue.py
  • ai/modules/cmd_args.py
  • ai/modules/codeformer/codeformer_arch.py
  • ai/modules/codeformer/vqgan_arch.py
  • ai/modules/codeformer_model.py
  • ai/modules/config_states.py
  • ai/modules/deepbooru.py
  • ai/modules/deepbooru_model.py
  • ai/modules/devices.py
  • ai/modules/errors.py
  • ai/modules/esrgan_model.py
  • ai/modules/esrgan_model_arch.py
  • ai/modules/extensions.py
  • ai/modules/extra_networks.py
  • ai/modules/extra_networks_hypernet.py
  • ai/modules/extras.py
  • ai/modules/face_restoration.py
  • ai/modules/fifo_lock.py
  • ai/modules/generation_parameters_copypaste.py
  • ai/modules/gfpgan_model.py
  • ai/modules/gitpython_hack.py
  • ai/modules/gradio_extensons.py
  • ai/modules/hashes.py
  • ai/modules/hypernetworks/hypernetwork.py
    .py .js
  • ai/modules/hypernetworks/ui.py
  • ai/modules/images.py
  • ai/modules/img2img.py
  • ai/modules/import_hook.py
  • ai/modules/initialize.py
  • ai/modules/initialize_util.py
  • ai/modules/interrogate.py
  • ai/modules/launch_utils.py
  • ai/modules/localization.py
  • ai/modules/logging_config.py
  • ai/modules/lowvram.py
  • ai/modules/mac_specific.py
  • ai/modules/masking.py
  • ai/modules/memmon.py
  • ai/modules/modelloader.py
  • ai/modules/models/diffusion/ddpm_edit.py
  • ai/modules/models/diffusion/uni_pc/__init__.py
  • ai/modules/models/diffusion/uni_pc/sampler.py
  • ai/modules/models/diffusion/uni_pc/uni_pc.py
  • ai/modules/ngrok.py
  • ai/modules/options.py
  • ai/modules/patches.py
  • ai/modules/paths.py
  • ai/modules/paths_internal.py
  • ai/modules/postprocessing.py
  • ai/modules/processing.py
    .py .js
  • ai/modules/processing_scripts/refiner.py
  • ai/modules/processing_scripts/seed.py
  • ai/modules/progress.py
  • ai/modules/prompt_parser.py
  • ai/modules/realesrgan_model.py
  • ai/modules/restart.py
  • ai/modules/rng.py
  • ai/modules/rng_philox.py
  • ai/modules/safe.py
  • ai/modules/script_callbacks.py
  • ai/modules/script_loading.py
  • ai/modules/scripts.py
  • ai/modules/scripts_auto_postprocessing.py
  • ai/modules/scripts_postprocessing.py
  • ai/modules/sd_disable_initialization.py
  • ai/modules/sd_hijack.py
  • ai/modules/sd_hijack_checkpoint.py
  • ai/modules/sd_hijack_clip.py
  • ai/modules/sd_hijack_clip_old.py
  • ai/modules/sd_hijack_ip2p.py
  • ai/modules/sd_hijack_open_clip.py
  • ai/modules/sd_hijack_optimizations.py
  • ai/modules/sd_hijack_unet.py
  • ai/modules/sd_hijack_utils.py
  • ai/modules/sd_hijack_xlmr.py
  • ai/modules/sd_models.py
  • ai/modules/sd_models_config.py
  • ai/modules/sd_models_types.py
  • ai/modules/sd_models_xl.py
  • ai/modules/sd_samplers.py
  • ai/modules/sd_samplers_cfg_denoiser.py
  • ai/modules/sd_samplers_common.py
  • ai/modules/sd_samplers_extra.py
  • ai/modules/sd_samplers_kdiffusion.py
  • ai/modules/sd_samplers_timesteps.py
  • ai/modules/sd_samplers_timesteps_impl.py
  • ai/modules/sd_unet.py
  • ai/modules/sd_vae.py
  • ai/modules/sd_vae_approx.py
  • ai/modules/sd_vae_taesd.py
  • ai/modules/shared.py
  • ai/modules/shared_cmd_options.py
  • ai/modules/shared_gradio_themes.py
  • ai/modules/shared_init.py
  • ai/modules/shared_items.py
  • ai/modules/shared_options.py
  • ai/modules/shared_state.py
  • ai/modules/shared_total_tqdm.py
  • ai/modules/styles.py
  • ai/modules/sub_quadratic_attention.py
  • ai/modules/sysinfo.py
  • ai/modules/textual_inversion/autocrop.py
  • ai/modules/textual_inversion/dataset.py
  • ai/modules/textual_inversion/image_embedding.py
  • ai/modules/textual_inversion/learn_schedule.py
  • ai/modules/textual_inversion/logging.py
  • ai/modules/textual_inversion/preprocess.py
  • ai/modules/textual_inversion/test_embedding.png
    .png
  • ai/modules/textual_inversion/textual_inversion.py
  • ai/modules/textual_inversion/ui.py
  • ai/modules/timer.py
  • ai/modules/txt2img.py
  • ai/modules/ui.py
  • ai/modules/ui_checkpoint_merger.py
  • ai/modules/ui_common.py
  • ai/modules/ui_components.py
  • ai/modules/ui_extensions.py
  • ai/modules/ui_extra_networks.py
  • ai/modules/ui_extra_networks_checkpoints.py
  • ai/modules/ui_extra_networks_checkpoints_user_metadata.py
  • ai/modules/ui_extra_networks_hypernets.py
  • ai/modules/ui_extra_networks_textual_inversion.py
  • ai/modules/ui_extra_networks_user_metadata.py
  • ai/modules/ui_gradio_extensions.py
  • ai/modules/ui_loadsave.py
  • ai/modules/ui_postprocessing.py
  • ai/modules/ui_prompt_styles.py
  • ai/modules/ui_settings.py
    .py .js
  • ai/modules/ui_tempdir.py
  • ai/modules/upscaler.py
  • ai/modules/util.py
  • ai/modules/xlmr.py
  • ai/package.json
  • ai/pyproject.toml
  • ai/requirements-test.txt
  • ai/requirements.txt
  • ai/requirements_versions.txt
  • ai/screenshot.png
    .png
  • ai/script.js
    .js
  • ai/scripts/custom_code.py
    .py .js
  • ai/scripts/img2imgalt.py
  • ai/scripts/loopback.py
  • ai/scripts/outpainting_mk_2.py
  • ai/scripts/poor_mans_outpainting.py
  • ai/scripts/postprocessing_codeformer.py
  • ai/scripts/postprocessing_gfpgan.py
  • ai/scripts/postprocessing_upscale.py
  • ai/scripts/prompt_matrix.py
  • ai/scripts/prompts_from_file.py
  • ai/scripts/sd_upscale.py
  • ai/scripts/stable.exe
    .exe windows:5 windows x64

    20d446c1cb128febd23deb17efb67cf6


    Code Sign

    Headers

    Imports

    Sections

  • {��o�-a.pyc
  • ai/scripts/xyz_grid.py
  • ai/style.css
  • ai/test/conftest.py
  • ai/test/test_extras.py
  • ai/test/test_files/empty.pt
    .zip
  • archive/data.pkl
  • archive/version
  • ai/test/test_files/img2img_basic.png
    .png
  • ai/test/test_files/mask_basic.png
    .png
  • ai/test/test_img2img.py
  • ai/test/test_txt2img.py
  • ai/test/test_utils.py
  • ai/textual_inversion_templates/hypernetwork.txt
  • ai/textual_inversion_templates/none.txt
  • ai/textual_inversion_templates/style.txt
  • ai/textual_inversion_templates/style_filewords.txt
  • ai/textual_inversion_templates/subject.txt
  • ai/textual_inversion_templates/subject_filewords.txt
  • ai/webui-macos-env.sh
    .sh linux
  • ai/webui-user.bat
  • ai/webui-user.sh
    .sh linux
  • ai/webui.bat
    .bat .vbs
  • ai/webui.py
  • ai/webui.sh
    .sh linux