>samit_hota
Back to IOCs
G00216 indicators

DarkComet — Indicators of Compromise

Samit Hota·
#ioc#darkcomet

Overview

Indicators of compromise associated with DarkComet. 6 indicators listed below, linked to the G0021 adversary profile.

Not exhaustive, and confidence varies. Always corroborate against your own telemetry before taking action.

TypeIndicatorFirst SeenConfidence
ip:port176.129.203.146:1604July 30, 202650%
ip:port86.109.75.132:1604July 30, 202650%
ip:port86.109.75.132:7777July 30, 202650%
ip:port189.150.133.139:1604July 30, 202650%
ip:port151.247.193.128:7777July 30, 202650%
ip:port105.100.163.183:1604July 30, 202650%

Seeing these indicators in your logs?

Let's figure out how far it's gotten.

Book an advisory call