DarkComet RAT sample – DC_MUTEX-HJX3KWA

Are you searching for DarkComet RAT samples and mutexes?! Then stop your search and take a look at the “a9e58f53a4a663e472bf0313d4699cb2” RAT example which has been identified by us on “ 30-Sep-14”. 

The DarkComet RAT is often used by script kiddies and cyber criminals to control multiple infected computers at once via a DarkComet RAT graphical user interface.

The DarkComet RAT allows the operator to fully control an infected computer. This is the information which we were able to collect from the “a9e58f53a4a663e472bf0313d4699cb2 DarkComet RAT sample.

DarkComet RAT information which was identified on 30-Sep-14

MD5

 a9e58f53a4a663e472bf0313d4699cb2

SHA256

 75adc9ff5aeff230e4942b2d7824f88c605c20efddaf199c9f5787850346d6fa

FILESIZE

 689664

FILETYPE

 PE32 executable (GUI) Intel 80386, for MS Windows

DC-MUTEX

 DC_MUTEX-HJX3KWA

DOMAIN

 sargentgrant.linkpc.net

IP

 174.127.99.213

DARKCOMET RAT

DarkComet RAT capabilities

The capabilities of DarkComet RAT allow the operator to start the following functions on the infected device (not a full list):

  • Microphone
  • Webcam
  • Visit website
  • Navigate through folder

Additional notes

We do not have additional information for this sample.

virustotal scan

SCAN WITH VIRUSTOTAL

https://www.virustotal.com/en/url/submission/?force=1&url=sargentgrant.linkpc.net