[Snowwy]

My post got lost up there! I'll post it again though!

After crypting my RAT, is it possible to rename it to something different? Or would it corrupt the RAT?

[ajx3]

Hi,

I am new to all of this. With that said, I have ready through all the tutorials regarding DarkComet on this forum as well as confirming all the steps on various videos online.

My port forwarding appears to be working as intend. I actively shut off and re-enable the port on port forwarding to make sure that it is indeed working and that canyouseeme.org can see it.

No-ip DUC is running with 3 check marks.

I am running DarkComet 5.3.1. Everything is running on a VM. After the server is generated, I would a) test it on Sandboxie or b) just double click to infest the VM. In either case, it doesn't work and nothing shows up on DarkComet. If I click it on the VM, the exe will actually disappear.

Can someone suggest what I should do next?

Much appreciated.

[Understalker]

My post got lost up there! I'll post it again though!

After crypting my RAT, is it possible to rename it to something different? Or would it corrupt the RAT?

I would recommend not changing it, but I have never had the need to change the server name before. I would simply just recommend making a new server to avoid any issues.

---

Hi,

I am new to all of this. With that said, I have ready through all the tutorials regarding DarkComet on this forum as well as confirming all the steps on various videos online.

My port forwarding appears to be working as intend. I actively shut off and re-enable the port on port forwarding to make sure that it is indeed working and that canyouseeme.org can see it.

No-ip DUC is running with 3 check marks.

I am running DarkComet 5.3.1. Everything is running on a VM. After the server is generated, I would a) test it on Sandboxie or b) just double click to infest the VM. In either case, it doesn't work and nothing shows up on DarkComet. If I click it on the VM, the exe will actually disappear.

Can someone suggest what I should do next?

Much appreciated.

I would recommend testing it on Anubis, that should show if you set it up correctly.

[ajx3]

I would recommend not changing it, but I have never had the need to change the server name before. I would simply just recommend making a new server to avoid any issues.

---

I would recommend testing it on Anubis, that should show if you set it up correctly.

I will try to do that now. Thank you for suggesting that.

[Jayturn]

Hey i just set up my rat i was wondering if anyone can help me out with some test slaves or teach me a method of spreading my server.

[Snowwy]

I would recommend not changing it, but I have never had the need to change the server name before. I would simply just recommend making a new server to avoid any issues.

Yes, that's what I thought, thanks again.

[Understalker]

I will try to do that now. Thank you for suggesting that.

anubis.iseclab.org heres the link for it. 🤝

---

Hey i just set up my rat i was wondering if anyone can help me out with some test slaves or teach me a method of spreading my server.
http://sharesend.com/13z5zlns link to server

I cannot give you a test slave(s), but I can give you spreading methods.

Create a fake generator - and post a video on YT with the program being backdoored.

or

Use the Torrent method.

---

Yes, that's what I thought, thanks again.

No problem, anymore questions feel free to come back to the thread.

[vindianv]

I think my post got lost in the mix so here it is again!

Can you elaborate on that a bit. I tried it with RazerCrypt and it still says application type is a .exe, but in the title it says for example Test.jpg Is that correct?

Btw thanks for what you guys are doing. Its absolutely amazing, great way for people to get info in an organized and quick manner!

[ajx3]

anubis.iseclab.org heres the link for it.

---

I have done this but am not sure how to analyze it...aside from 'Process-status at analysis end: dead' lol

There is so much stuff. I am not sure what I should be looking at. I speculate that it's definitely the server. What are the items that I should focus on on the report to resolve the issue?

[Understalker]

I have done this but am not sure how to analyze it...aside from 'Process-status at analysis end: dead' lol

There is so much stuff. I am not sure what I should be looking at. I speculate that it's definitely the server. What are the items that I should focus on on the report to resolve the issue?

You should have received a temporary slave if you set everything up correctly, do you have your no-ip host, ports forwarded, and are you using minimalist settings when testing on anubis?

[ajx3]

You should have received a temporary slave if you set everything up correctly, do you have your no-ip host, ports forwarded, and are you using minimalist settings when testing on anubis?

I don't see a temporary slave. That should show up in DarkComet... correct?

PortForward appears to be working as intended on 1604 and DarkComet is listening to that port.
No-ip DCU is running with 3 checks. The host in no-ip matches the one on the server.

I am looking on Anubis and am not sure what you mean by the minimalist setting. I pretty much followed everything from here: https://hackforums.net/showthread.php?tid=2209495 and did not use 'Advanced Submission'.

[Understalker]

I don't see a temporary slave. That should show up in DarkComet... correct?

PortForward appears to be working as intended on 1604 and DarkComet is listening to that port.
No-ip DCU is running with 3 checks. The host in no-ip matches the one on the server.

I am looking on Anubis and am not sure what you mean by the minimalist setting. I pretty much followed everything from here: https://hackforums.net/showthread.php?tid=2209495

Can you get Teamviewer so I can take a look at it? If so, PM me your TV details.

[ajx3]

Can you get Teamviewer so I can take a look at it? If so, PM me your TV details.

Installed teamviewer just now but unable to PM you as I haven't posted 10 times yet...
Do you mind if I just posted a few more times to this thread and get myself up to 10 so that I can PM you?

[vindianv]

I am actually having the same issues as he is. I have everything set up correctly, I even have already infected someone and was able to use the features of Dark Comet, but I have ran a test on anubis and do not seem to be getting a "slave"

[Snowwy]

I was just messing with a slave when I seen him open up CCleaner, I was then disconnected - obviously it deleted my RAT, anyway to stop this?