MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3260d94ea8b51c306f506eff40997055b9cefd0a79c2b6fda4c8c8aea8e8dbc1. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

AdaptixC2

Vendor detections: 14

Intelligence 14 IOCs YARA 5 File information Comments

SHA256 hash:	3260d94ea8b51c306f506eff40997055b9cefd0a79c2b6fda4c8c8aea8e8dbc1
SHA3-384 hash:	89469cac69b4bf34708dcc9976affdd525de3e071d2c59eb915adb02b4b99de93eec209a19c1250f3de89078021dd1b9
SHA1 hash:	ba110f49cb787438c2d4dd8886c964f96049f417
MD5 hash:	4339992a31aaee2ca8802cff5a40c43b
humanhash:	white-gee-kentucky-friend
File name:	dbsql2_loader.exe
Download:	download sample
Signature	AdaptixC2 Create hunting rule
File size:	123'392 bytes
First seen:	2026-08-06 11:52:35 UTC
Last seen:	Never
File type:	exe
MIME type:	application/x-dosexec
imphash	cd54411d9ca69fabd0c0174b3b55155b (1 x AdaptixC2)
ssdeep	1536:PuQzmVOORWx9V8qd/JO20BawX+P7uBJr+UeTgc118QwVti4SSzJ0tosHo+r6xzyl:P5zmEv/VTQOaqgD2iz0wdARaKmEnP
TLSH	T11FC37337D3B3C4ADC05AD234AB8395B3B9F07C1C4634752A478596223B5BE786BBE184
TrID	45.6% (.EXE) Microsoft Visual C++ compiled executable (generic) (16529/12/5) 18.0% (.EXE) Win64 Executable (generic) (6522/11/2) 13.9% (.EXE) Win16 NE executable (generic) (5038/12/1) 5.6% (.ICL) Windows Icons Library (generic) (2059/9) 5.6% (.EXE) OS/2 Executable (generic) (2029/13)
Magika	pebin
Reporter	GDHJDSYDH1
Tags:	Adaptix AdaptixC2 backdoor exe

Intelligence

File Origin

# of uploads :

# of downloads :

177

Origin country :

n/a

Vendor Threat Intelligence

Malware configuration found for:

AdaptixC2

Details

Link:

https://research.acce.ciphertechsolutions.com/results/6df0e5a1-b3db-49ab-a67a-8f82bccacc18/

Malware family:

n/a

ID:

File name:

dbsql2_loader.exe

Verdict:

No threats detected

Analysis date:

2026-08-06 11:49:53 UTC

Tags:

n/a

Link:

https://app.any.run/tasks/57f3e068-e9fc-4daf-94b4-8df7e1c6c76e

Note:

ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample

Detection:

n/a

Link:

https://www.capesandbox.com/analysis/79034/

Detection(s):

Win.Malware.Adaptixc-10058672-0

Win.Trojan.AdaptixC2-10058664-0

Result

Verdict:

Clean

Maliciousness:

Behaviour

Connection attempt

Sending a custom TCP request

Verdict:

Likely Malicious

Threat level:

7.5/10

Confidence:

100%

Tags:

anti-debug base64 packed stealer

Link:

https://www.filescan.io/uploads/6a7475b63c2c4e4d68cf674c/reports/cc5a0372-dfdb-4988-b660-926bfc892e98/overview

Verdict:

Malicious

Labled as:

Win/malicious_confidence_70%

Link:

https://www.hybrid-analysis.com/sample/3260d94ea8b51c306f506eff40997055b9cefd0a79c2b6fda4c8c8aea8e8dbc1

Verdict:

Malicious

File Type:

exe x64

First seen:

2026-08-06T06:18:00Z UTC

Last seen:

2026-08-07T06:41:00Z UTC

Hits:

~100

Link:

https://opentip.kaspersky.com/3260d94ea8b51c306f506eff40997055b9cefd0a79c2b6fda4c8c8aea8e8dbc1/results?tab=lookup

Malware family:

AdaptixC2

Verdict:

Malicious

Link:

https://analyze.intezer.com/analyses/e06def93-dd9b-44fc-a3f3-2e731c04231c

Score:

95%

Verdict:

Malware

File Type:

Link:

https://malprob.io/report/3260d94ea8b51c306f506eff40997055b9cefd0a79c2b6fda4c8c8aea8e8dbc1

Verdict:

inconclusive

YARA:

3 match(es)

Tags:

Executable PE (Portable Executable) PE File Layout Win 64 Exe x64

Link:

https://app.malva.re/file/4339992a31aaee2ca8802cff5a40c43b

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/3260d94ea8b51c306f506eff40997055b9cefd0a79c2b6fda4c8c8aea8e8dbc1/

Threat name:

Win64.Backdoor.AdaptixC2

Status:

Malicious

First seen:

2026-08-06 11:53:31 UTC

File Type:

PE+ (Exe)

Extracted files:

AV detection:

20 of 38 (52.63%)

Threat level:

5/5

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=gjqnstviwuoda32qn37ubglqkw4457ikphbln7nezdek5khi3paq._file

Verdict:

malicious

Label(s):

AdaptixC2

Link:

https://reports.threatray.com/e0102e0b-8574-45ec-8867-89116a425c90

Result

Malware family:

adaptixc2

Score:

10/10

Tags:

family:adaptixc2 backdoor rat trojan

Link:

https://tria.ge/reports/260806-n2g14aaq8t/

Behaviour

Family: AdaptixC2

Unpacked files

SH256 hash:

3260d94ea8b51c306f506eff40997055b9cefd0a79c2b6fda4c8c8aea8e8dbc1

MD5 hash:

4339992a31aaee2ca8802cff5a40c43b

SHA1 hash:

ba110f49cb787438c2d4dd8886c964f96049f417

Detections:

win_adaptix_c2_a0

triage_adaptix_c2

triage_adaptix_hacktool

Link:

https://www.unpac.me/results/fc1bda7f-f87c-44fb-81ce-2bfd02a2c2bc/

SH256 hash:

85472a21311ac8b11632523369c60c253e6c2e8fef56eca829107df0696ebe37

MD5 hash:

cfcab68155dd429637f0312812575f96

SHA1 hash:

3208ea9a0118a6a285329bb686e5419fc472f40e

Detections:

win_adaptix_c2_a0

triage_adaptix_hacktool

Link:

https://www.unpac.me/results/fc1bda7f-f87c-44fb-81ce-2bfd02a2c2bc/

Malware family:

AdaptixC2

Verdict:

Malicious

Link:

https://www.vmray.com/analyses/_mb/3260d94ea8b5/report/overview.html

Please note that we are no longer able to provide a coverage score for Virus Total.

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/3260d94ea8b51c306f506eff40997055b9cefd0a79c2b6fda4c8c8aea8e8dbc1

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.

Rule name:	golang_bin_JCorn_CSC846 Create hunting rule
Author:	Justin Cornwell
Description:	CSC-846 Golang detection ruleset

Rule name:	pe_detect_tls_callbacks Create hunting rule

Rule name:	VECT_Ransomware Create hunting rule
Author:	Mustafa Bakhit
Description:	Detects activity associated with VECT ransomware. This includes registry modifications and deletions, execution of system and defense-evasion commands, suspicious API usage, mutex creation, file and memory manipulation, ransomware note generation, anti-debugging and anti-analysis techniques, and embedded cryptographic constants (SHA256) characteristic of this malware family. Designed for threat intelligence and malware detection environments.