DarkKomet is a trojan that acts as a backdoor to infected machines. According to Kaspersky, the trojan is able to: * Obtain information about the infected computer. * Interpret commands from a remote attacker. * Obtain a list of processes and open windows. * Start and terminate processes * Install and uninstall programs * Modify system services * Modify the system registry * Run JS/VBS scripts from a remote source. * Create, modify and delete files * Save keystrokes, in an unencrypted format that is available locally, within %APPDATA%dclogs\YY-MM-DD.dc. * Act as a SOCKS proxy server. * Capture clipboard contents * Send files to a remote FTP server.
| Attributes | Values |
|---|---|
| rdf:type | |
| rdfs:label |
|
| rdfs:comment |
|
| dcterms:subject | |
| dbkwik:malware/pro...iPageUsesTemplate | |
| Platform |
|
| Type |
|
| AKA |
|
| Subtype |
|
| abstract |
|