Overview

overview

10

Static

static

3

16b6e92b8a...76.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    16b6e92b8a68451ed04dd34bcbe725d8355abe6fc340415f4176027458ffe076
  • Size 1.4MB
  • Sample250623-lads9atyft
  • SHA256 16b6e92b8a68451ed04dd34bcbe725d8355abe6fc340415f4176027458ffe076
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
adaptixc2RATbackdoordiscoverytrojan

Malware Config

Extracted

Family

  • adaptixc2

C2

  • dsvsdgregv.global.ssl.fastly.net

  • 144.172.106.67

Attributes
  • port

    443

  • url_path

    /login.php

  • user_agent

    Mozilla/5.0 (Windows NT 6.2; rv:20.0) Gecko/20121202 Firefox/20.0

Targets

    • Target
      16b6e92b8a68451ed04dd34bcbe725d8355abe6fc340415f4176027458ffe076
    • Size 1.4MB
    • SHA256 16b6e92b8a68451ed04dd34bcbe725d8355abe6fc340415f4176027458ffe076
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    adaptixc2RATbackdoordiscoverytrojan

    • AdaptixC2

      AdaptixC2 is an open-source C2 framework written in C++.

      RATtrojanbackdooradaptixc2

    • Adaptixc2 family

      adaptixc2

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks