c2 framework
AdaptixC2
Named by 1 report, 3 detection rules, 0 IOC feeds and 1 tracked actor.
Reports
Detection rules
YARA rules whose family metadata names this family, by detection page.
Detection rules
AdaptixC2 Open Directory Exposure (45.130.148.125)
MALW_AdaptixC2_Windows_Beacon_Stock, MALW_AdaptixC2_Operator_Injector_SI, MALW_AdaptixC2_PowerShell_Loader_BeaconPS1
Tracked actors
Designations whose profile lists this family as tooling.
- UTA-2026-006: Stock AdaptixC2 operator with an operator-written PowerShell and .NET injection chain
A family name here is the label the linked rule, feed or profile carries, normalised to one spelling by _data/families.yml. Where a report declines to name a family, this page does not either.