MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 446f04a7517a5ba6b962d65860cb69ce1e8ae1a1fb038fefbf87e875fcf41540. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AdaptixC2


Vendor detections: 13


Intelligence 13 IOCs YARA 1 File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 446f04a7517a5ba6b962d65860cb69ce1e8ae1a1fb038fefbf87e875fcf41540
SHA3-384 hash: d56d542b584d8972f21e65240fd4edce9983704978f440f64213104ce5af18527ebfc3a9f7c27f5adc0318b457109997
SHA1 hash: 36e493ed614e4ec0f453f37ce904e7c620de5e6c
MD5 hash: 82cdbe243a14f95b8bcc80afb24df8d8
humanhash: hot-happy-four-wisconsin
File name:file.exe
Download: download sample
Signature AdaptixC2
Create hunting rule
File size:94'720 bytes
First seen:2026-07-20 12:54:40 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
ssdeep 1536:/i0mo+NOKqQRELxJBu0jwWhcaZT52GbS2dDevBUafg4ucx09cY2eyFu7vmSvDtd6:T+NOBhucbS28fgOHdIEn
TLSH T15A937335E3B2D0ADC45F8578AF975873AAF07C2C8630A135479966213B5FDB81FBA180
TrID 44.6% (.EXE) Win64 Executable (generic) (6522/11/2)
14.0% (.ICL) Windows Icons Library (generic) (2059/9)
13.8% (.EXE) OS/2 Executable (generic) (2029/13)
13.7% (.EXE) Generic Win/DOS Executable (2002/3)
13.6% (.EXE) DOS Executable (generic) (2000/1)
Magika pebin
Reporter BlinkzSec
Tags:AdaptixC2

Intelligence

File Origin
# of uploads :
1
# of downloads :
102
Origin country :
IN IN
Vendor Threat Intelligence
Malware configuration found for:
AdaptixC2
Details
Link:
https://research.acce.ciphertechsolutions.com/results/05d695c3-9dd7-477c-9495-f4821ad6b4f9/
Detection:
n/a
Link:
https://www.capesandbox.com/analysis/75439/
Detection(s):
SecuriteInfo.com.Variant.Zusy.606296.77788797.UNOFFICIAL
Create hunting rule

Verdict:
Malicious
Score:
96.5%
Link:
https://cyber-fortress.com/docs/result/index.php?id=6a5e1acfbcffb2c48cb7a1ed
Tags:
virus zusy hype
Result
Verdict:
Suspicious
Maliciousness:

Behaviour
Connection attempt to an infection source
Verdict:
Likely Malicious
Threat level:
  7.5/10
Confidence:
100%
Tags:
base64 packed
Link:
https://www.filescan.io/uploads/6a5e2dc132ae2e02b46a1891/reports/16af4d81-9076-4cd7-941d-35563ecce521/overview
Verdict:
Malicious
Labled as:
Zusy.Generic
Link:
https://www.hybrid-analysis.com/sample/446f04a7517a5ba6b962d65860cb69ce1e8ae1a1fb038fefbf87e875fcf41540
Verdict:
Malicious
File Type:
exe x64
First seen:
2026-05-22T01:17:00Z UTC
Last seen:
2026-07-20T13:09:00Z UTC
Hits:
~100
Link:
https://opentip.kaspersky.com/446f04a7517a5ba6b962d65860cb69ce1e8ae1a1fb038fefbf87e875fcf41540/results?tab=lookup
Malware family:
AdaptixC2
Create hunting rule
Verdict:
Malicious
Link:
https://analyze.intezer.com/analyses/fc8f760e-6ddc-4bab-9e95-ec712846e11e
Score:
92%
Verdict:
Malware
File Type:
PE
Link:
https://malprob.io/report/446f04a7517a5ba6b962d65860cb69ce1e8ae1a1fb038fefbf87e875fcf41540
Verdict:
inconclusive
YARA:
4 match(es)
Tags:
Executable PE (Portable Executable) PE File Layout Win 64 Exe x64
Link:
https://app.malva.re/file/82cdbe243a14f95b8bcc80afb24df8d8
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/446f04a7517a5ba6b962d65860cb69ce1e8ae1a1fb038fefbf87e875fcf41540/
Threat name:
Win64.Infostealer.Tinba
Create hunting rule
Status:
Malicious
First seen:
2026-05-14 18:25:49 UTC
File Type:
PE+ (Exe)
AV detection:
22 of 36 (61.11%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=irxqjj2rpjn2nolc2zmgbs3jzypivynb7mby7357q7uhl7hucvaa._file
Result
Malware family:
n/a
Score:
  3/10
Tags:
n/a
Link:
https://tria.ge/reports/260720-p5214scz5x/
Unpacked files
SH256 hash:
446f04a7517a5ba6b962d65860cb69ce1e8ae1a1fb038fefbf87e875fcf41540
MD5 hash:
82cdbe243a14f95b8bcc80afb24df8d8
SHA1 hash:
36e493ed614e4ec0f453f37ce904e7c620de5e6c
Detections:
win_adaptix_c2_a0
Create hunting rule
triage_adaptix_hacktool
Create hunting rule
Link:
https://www.unpac.me/results/ba53c9c9-04fa-436c-9429-6b97f2a75e19/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/446f04a7517a5ba6b962d65860cb69ce1e8ae1a1fb038fefbf87e875fcf41540

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.

Rule name:pe_no_import_table
Create hunting rule
Description:Detect pe file that no import table

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

AdaptixC2

Executable exe 446f04a7517a5ba6b962d65860cb69ce1e8ae1a1fb038fefbf87e875fcf41540

(this sample)

Cape
Cape
https://www.capesandbox.com/analysis/75439/
  
URLhaus
https://urlhaus.abuse.ch/url/3889134/
  
Delivery method
Distributed via web download

Comments