Skip to content

Hide Navigation Hide TOC

PoshC2 (a3a03835-79bf-4558-8e80-7983aeb842fb)

PoshC2 is an open source remote administration and post-exploitation framework that is publicly available on GitHub. The server-side components of the tool are primarily written in Python, while the implants are written in PowerShell. Although PoshC2 is primarily focused on Windows implantation, it does contain a basic Python dropper for Linux/macOS.[GitHub PoshC2]

Cluster A Galaxy A Cluster B Galaxy B Level
Sandworm Team (16a65ee9-cd60-4f04-ba34-f2f45fcfc666) Tidal Groups PoshC2 (a3a03835-79bf-4558-8e80-7983aeb842fb) Tidal Software 1
HEXANE (eecf7289-294f-48dd-a747-7705820f4735) Tidal Groups PoshC2 (a3a03835-79bf-4558-8e80-7983aeb842fb) Tidal Software 1
PoshC2 (a3a03835-79bf-4558-8e80-7983aeb842fb) Tidal Software APT33 (99bbbe25-45af-492f-a7ff-7cbc57828bac) Tidal Groups 1