AdaptixC2: A New Open-Source Framework Leveraged in Real-World Attacks
ID: 22d23de4-9bf7-51d8-bfbf-34ae72c73c85
STIX ID: report--22d23de4-9bf7-51d8-bfbf-34ae72c73c85
Feed Name: Palo Alto Networks Unit 42
Threat Score
This Unit 42 technical analysis documents AdaptixC2 — an open-source, modular post-exploitation C2 framework — being observed in active attacks. The report details two intrusion scenarios (social-engineering-driven RMM abuse with in-memory shellcode and an AI-generated PowerShell installer with DLL hijacking), describes beacon functionality and configuration formats, provides indicators (hashes, domains), Yara rules, hunting queries and a configuration extractor, and offers defensive recommendations.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.