Apollo and Mythic: A Myth Worth Retelling

This article presents a deep dive into Apollo, a Windows .NET agent for the Mythic C2 framework, showcasing operator-focused features such as browser-scripted task outputs, enhanced file and process triage (including ACLs and integrity levels), integrated screenshots and keylogging views, third-party .NET/PowerShell execution with on-the-fly injection technique selection, credential and token tracking, and comprehensive payload/artifact reporting. Emphasizing workflow, deconfliction, and OPSEC visibility, it demonstrates how Mythic’s UI and APIs enrich red-team operations and training without covering a specific incident or threat campaign.