AdaptixC2 Uncovered: Capabilities, Tactics & Hunting Strategies

This report analyzes AdaptixC2, a lightweight open-source command-and-control framework observed in active deployments: it describes the beacon's multi-protocol communications (HTTP/HTTPS, SMB, TCP), advanced evasion (runtime API hashing, RC4, injection), BOF module execution, lateral-movement and tunneling capabilities, and documents exposed infrastructure and IOCs (server headers, ports, certificates). The analysis maps ~102 active servers, provides HuntSQL detection queries, and recommends network- and host-based mitigations to detect and contain AdaptixC2 activity.