Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

SECRET//NOFORN
8.6 Changing Settings
If we later decide that Mr.B’s beacon time should be 2 hours, rather than the original
4 we set, we can use am target Mr.B config to update.
$ am target Mr.B config --beacon-interval 2h
$ am ls target Mr.B
Mr.B - id: ea515173422d4d6d8d18af4631abb76d arch: x86 uninstall_date: 2015-12-
31 beacon: 2h jitter: 15m
$ am commit DeathToPowerPoint Mr.B
Deploying DeathToPowerPoint to Mr.B
Deployed Mr.B to .\workspace\deploy\plans\ads\b4623a91
Target ID: ea515173422d4d6d8d18af4631abb76d
Index File:
874b82041bc44fb39139c0b4bf4fb18cbb021a54198c4230b4c051c969ebe0c9
Index Serial: 1408568164
Uninstall Date: 130959936000000000
Beacon Interval: 7200
Jitter: 900
Chunk Size: 10.00 MB
Dead Man Delay: 5184000
LP Key:
132bc430063a44db0b7fa65efdc208ca733a3ae20ecba1aef2750df54a56f7e3
Plan Hash:
fe10aeed5d9324a5ce8b74e390cb17b6006127bf835e0ad3a2e227f1397d05fb
Plan Length: 4
Because target data is include with plan data, we had to re-commit the plan we
want to the updated target. The new plan files will have to be copied to the
webserver. The next time AM beacons in it will permanently change its configured
beacon interval.
Note that even though the target changed all the gremlins needed are already
downloaded and running on target. AM will recognize this and not download
duplicates.
64
SECRET//NOFORN

e-Highlighter

Click to send permalink to address bar, or right-click to copy permalink.

Un-highlight all Un-highlight selectionu Highlight selectionh