DarkComet RAT sample – DC_MUTEX-U0CYK52

Are you searching for DarkComet RAT samples and mutexes?! Then stop your search and take a look at the “6fb0002a34dfd309ce405e4f650e3f51” RAT example which has been identified by us on “ 30-Sep-14”. 

The DarkComet RAT is often used by script kiddies and cyber criminals to control multiple infected computers at once via a DarkComet RAT graphical user interface.

The DarkComet RAT allows the operator to fully control an infected computer. This is the information which we were able to collect from the “6fb0002a34dfd309ce405e4f650e3f51 DarkComet RAT sample.

DarkComet RAT information which was identified on 30-Sep-14

MD5

 6fb0002a34dfd309ce405e4f650e3f51

SHA256

 aceab25efc4c191c4559c2fa0189df73aaf6da0dc9b339f5291eb293d1772791

FILESIZE

 290304

FILETYPE

 PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

DC-MUTEX

 DC_MUTEX-U0CYK52

DOMAIN

 gishtird.ddns.net

IP

 92.112.210.215

DARKCOMET RAT

DarkComet RAT capabilities

The capabilities of DarkComet RAT allow the operator to start the following functions on the infected device (not a full list):

  • Microphone
  • Webcam
  • Visit website
  • Navigate through folder

Additional notes

We do not have additional information for this sample.

virustotal scan

SCAN WITH VIRUSTOTAL

https://www.virustotal.com/en/url/submission/?force=1&url=gishtird.ddns.net