DarkComet RAT Noob friendly tutorial

First of all, I would like to say thanks to all members of IHC for letting me into this awesome group.
Today,I will be getting you a noob friendly tutorial on how to set up Darkcomet and access your friends’ computers remotely(without their consent).

Stuff you will need
1. A Computer
2. An Internet Connection
3. Ability to port-forward(you must know your router’s username and password)
4. Darkcomet RAT tool
5. NO IP DUC/DYN DNS
6. Winrar/Winzip

Tutorial

First of all, download Darkcomet and No-IP.
What you should do next is open up the bad boy(Darkcomet) and go to Socket/Net section.Right click and click on “Add port to listen to”.Add “1604” and enable UPnP.
Click on listen and your configuration is done.
We will be creating a stub now.Go to menu and click on server module->expert.
Main Settings
Security Password – Adds a password so only you can manage bots
Mutex – Stops multiple connections on the same port
Server ID – The ID or Group bots that run this server are in
Profile Name – You can save your settings under a profile name
Process Hijacking – Firewall Bypass, not recommended if crypting (outdated)

Network Settings
IP/DNS – The DNS or IP Address bots will connect to
Port – Port bots will use to connect
Add – This will add the settings, remember to click this!
Also remember to click the added setting once added

Module Startup
Startup – Starts the stub with windows
Drop File in – Where the virus will be placed
Melt File – Deletes the virus execution file, but keeps virus after running
Date Created – Change the creation date to trick users
Persistence – Very important, keeps the program task from being removed

Install Message
This is basically where you make a fake error message when your virus starts to make it seem more legitimate.
Icon – Choose which img comes with the error, I suggest the “X” icon.
Title – What it says at the top of the error message (I.E “Error 804″)
Message – What the actual error says “Warning, an unexpected error has occurred, program will now be terminated”
Test Messagebox – You can test the error on yourself, it is harmless and you can do it just to be sure

Module Shield
Persistent Process – Again, persistence for more than task manager, recommended.
EVERYTHING ELSE IF NOT RECOMMENDED AND IS OUTDATED IN THE MODULE SHIELD SECTION

Keylogger, Hosts, Binder, and Icon
Keylogger is able to send logged keys to a website through FTP connection.
You can manage a victim’s “Hosts.txt” file through here and control which websites he can go on.
Bind a file with your server so they both run at the same time, this will make the user less suspicious.
Change icon of file to make it more legitimate and cause less suspicion.

DUC / No-iP – DNS Config

Creating a No-IP Account – DNS Config Section 1.1
1. Go to http://www.noip.com/newUser.php and register
2. Create a “No-ip.biz” hostname with any name you want
3. Click “No thanks, I’ll use no-ip.biz” and click “Sign Up”
4. Validate your Email and Activate your Account

Configuring DUC – DNS Config Section 1.2
1. Open No/IP DUC and log into your No/Ip Account
2. Click “Edit Hosts” on the DUC Menu
3. Select your no-ip.biz website and click “Save”
4. Click Refresh Now and you’re good to go!
5. Click File>Hide to get all of that out of your way

Setting up DUC or No/IP with Darkcomet – DNS Config Section 1.3
1. Open Dark Comet and click the drop down menu (Top right corner)
2. Click Server Module > Full Editor (Expert)
3. Use the Previous tips to setup your stub but leave the “Network Settings” alone
4. Instead of your IP address, enter your No/IP Website (DNS) and port “1604”
5. Press the “Add” button and click on it to select it
6. Finish your settings and press build stub.

Send the stub to the target and when he executes it, you will gain remote access to his computer.

Send me a message here if you have any queries.

www.facebook.com/SouravChoudhuryStrikesBack