Analysis
- geolocation tags
- max time kernel
298s - max time network
315s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
- submitted
15/04/2026, 19:56
General
- Target Appraiser X/Tesseract-OCR/text2image.exe
- Size 359KB
- Sample260415-ynyf2aby6x
- SHA256 45981c5d8b88027900b2629d8c1dc5362d9f440db8afa01892b285407a9995fd
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\Appraiser X\Tesseract-OCR\text2image.exe"C:\Users\Admin\AppData\Local\Temp\Appraiser X\Tesseract-OCR\text2image.exe"1⤵
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/948-0-0x00007FFB33470000-0x00007FFB3364F000-memory.dmp
memory/948-1-0x00007FF7881B0000-0x00007FF78820F000-memory.dmp
memory/948-2-0x00007FFB42B30000-0x00007FFB42E61000-memory.dmp
memory/948-4-0x00007FFB42880000-0x00007FFB429F0000-memory.dmp
memory/948-11-0x00007FFB4CEC0000-0x00007FFB4CED8000-memory.dmp
memory/948-13-0x00007FFB32F70000-0x00007FFB331C0000-memory.dmp
memory/948-26-0x00007FFB42670000-0x00007FFB42683000-memory.dmp
memory/948-28-0x00007FFB30E10000-0x00007FFB30E88000-memory.dmp
memory/948-27-0x00007FFB30E90000-0x00007FFB30F79000-memory.dmp
memory/948-24-0x00007FFB46650000-0x00007FFB46661000-memory.dmp
memory/948-23-0x00007FFB39CC0000-0x00007FFB39D2A000-memory.dmp
memory/948-39-0x00007FFB30AF0000-0x00007FFB30CAD000-memory.dmp
memory/948-38-0x00007FFB30AD0000-0x00007FFB30AF0000-memory.dmp
memory/948-44-0x00007FFB303E0000-0x00007FFB30416000-memory.dmp
memory/948-43-0x00007FFB30420000-0x00007FFB3044E000-memory.dmp
memory/948-42-0x00007FFB30450000-0x00007FFB30569000-memory.dmp
memory/948-29-0x00007FFB30F80000-0x00007FFB32CDC000-memory.dmp
memory/948-41-0x00007FFB30570000-0x00007FFB305A6000-memory.dmp
memory/948-40-0x00007FFB305B0000-0x00007FFB30AC8000-memory.dmp
memory/948-37-0x00007FFB37D50000-0x00007FFB37D61000-memory.dmp
memory/948-36-0x00007FFB33BD0000-0x00007FFB33BF1000-memory.dmp
memory/948-35-0x00007FFB37D70000-0x00007FFB37D8D000-memory.dmp
memory/948-34-0x00007FFB38F60000-0x00007FFB38F78000-memory.dmp
memory/948-33-0x00007FFB37D90000-0x00007FFB37DBE000-memory.dmp
memory/948-32-0x00007FFB41AD0000-0x00007FFB41AEB000-memory.dmp
memory/948-31-0x00007FFB30CB0000-0x00007FFB30D6C000-memory.dmp
memory/948-30-0x00007FFB30D70000-0x00007FFB30E08000-memory.dmp
memory/948-22-0x00007FFB427E0000-0x00007FFB42815000-memory.dmp
memory/948-21-0x00007FFB46670000-0x00007FFB46694000-memory.dmp
memory/948-20-0x00007FFB47400000-0x00007FFB47445000-memory.dmp
memory/948-19-0x00007FFB32CE0000-0x00007FFB32D95000-memory.dmp
memory/948-18-0x00007FFB43420000-0x00007FFB4347E000-memory.dmp
memory/948-17-0x00007FFB32DA0000-0x00007FFB32E67000-memory.dmp
memory/948-16-0x00007FFB4CDA0000-0x00007FFB4CDB6000-memory.dmp
memory/948-25-0x00007FFB43160000-0x00007FFB4318C000-memory.dmp
memory/948-15-0x00007FFB32E70000-0x00007FFB32F6A000-memory.dmp
memory/948-14-0x00007FFB37DC0000-0x00007FFB37E86000-memory.dmp
memory/948-12-0x00007FFB4BA70000-0x00007FFB4BA9C000-memory.dmp
memory/948-10-0x00007FFB3AF80000-0x00007FFB3AFE9000-memory.dmp
memory/948-9-0x00007FFB331C0000-0x00007FFB33469000-memory.dmp
memory/948-7-0x00007FFB33650000-0x00007FFB33988000-memory.dmp
memory/948-6-0x00007FFB33990000-0x00007FFB33AE2000-memory.dmp
memory/948-5-0x00007FFB42820000-0x00007FFB4287C000-memory.dmp
memory/948-3-0x00007FFB429F0000-0x00007FFB42B21000-memory.dmp
memory/948-8-0x00007FFB33470000-0x00007FFB3364F000-memory.dmp