medium
advisory
AdaptixC2: New botnet command-and-control infrastructure
ThreatFox identified a new AdaptixC2 botnet command-and-control server at 77.238.235.31:10443, indicating active network communication associated with this malware family.
Triage facts
Revision 1- Evidence
- Unknown
- Severity
- Medium
- Action
- Elevated
- Sources
- 1 public source
- Freshness
- Revision 1Nov 5, 13:34 UTC
- Detection
- 1 IOC
- Source quality
- A1Likely
ThreatFox has reported a new AdaptixC2 command-and-control (C2) node identified on 2026-11-04. The infrastructure facilitates botnet operations. As of this report, no specific exploit path or targeted product range is disclosed, but the threat is associated with the win.adaptix_c2 malware family.
Recommendation
- Block all inbound and outbound traffic to the IP address 77.238.235.31 on port 10443 at the network perimeter.
- Hunt for internal network connections to the identified IP across firewall and proxy logs.
- Monitor host-based process telemetry for unexpected connections to external IPs using non-standard ports or associated with unrecognized processes.
Immediate actions
Block traffic to 77.238.235.31:10443 on firewall.
SOC
2h
Threat Hunt
Identify endpoints initiating network connections to 77.238.235.31.
T1071.001
high
high confidence
hunt now
Data: Firewall logs, Proxy logs, Sysmon Event ID 3
Indicators of compromise
1
ip
| Type | Value |
|---|---|
| ip | 77.238.235.31 |