General

  • Target
    18072026_0932_MigracaoMTLS-Opera360-Migracao-mTLS-SEC-2026-0047.pdf.lnk.zip
  • Size 3KB
  • Sample260718-lhp69afs8m
  • SHA256 44b455ec4213a9764560d706fb2b84259ea93dde35d73c946f811fbc0d1d6858
  • MD5 SHA1 SHA512 TLSH

Malware Config

Extracted

Family
  • adaptixc2

C2
  • events.cacheedge.net

Attributes
  • port

    443

  • user_agent

    Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100123 Firefox/119.0

Targets

    • Target
      MigracaoMTLS/Opera360-Migracao-mTLS-SEC-2026-0047.pdf.lnk
    • Size 1KB
    • SHA256 fadcac60cff1511379bb9acfa73eaab1d4fb3c4cbbafef3dd5e370b3da8485c6
    • MD5 SHA1 SHA512 TLSH
    • Family: AdaptixC2

      AdaptixC2 is an open-source C2 framework written in C++.

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Target
      MigracaoMTLS/p.dll
    • Size 6KB
    • SHA256 c014fb655e7d6b5e7ca3d9a0f24259ee85cdcd5c83fa1c87d162bc1d9b6d3dd6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: AdaptixC2

      AdaptixC2 is an open-source C2 framework written in C++.

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Downloads MZ/PE file

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks