Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

SECRET//ORCON//NOFORN
ASSASSIN v1.1 USER GUIDE
March 2012
APPENDIX A:OVERVIEW..........................................................................3
1CONCEPT OF OPERATIONS.....................................................................4
2SYSTEM COMPONENTS..........................................................................5
2.1IMPLANT EXECUTABLES......................................................................6
2.2DEPLOYMENT EXECUTABLES...............................................................7
2.3BUILDER............................................................................................8
2.4TASKER.............................................................................................9
2.5POST PROCESSOR............................................................................10
2.6COLLIDE HANDLERS.........................................................................11
3SYSTEM REQUIREMENTS......................................................................12
3.1PYTHON..........................................................................................13
3.2COLLIDE..........................................................................................14
APPENDIX B:ASSASSIN IMPLANT............................................................15
1IMPLANT EXECUTABLE USAGE..............................................................16
1.1IMPLANT DLL...................................................................................17
APPENDIX C:RUNNING VIA DLLMAIN......................................................18
APPENDIX D:RUNNING VIA RUNDLL32....................................................19
1.1IMPLANT SERVICE DLL......................................................................20
APPENDIX E:RUNNING VIA RUNDLL32....................................................21
APPENDIX F:RUNNING VIA SERVICEMAIN................................................22
1.1IMPLANT EXE ..................................................................................23
2IMPLANT IDENTIFICATION....................................................................24
3BEACON.............................................................................................25
3.1BEACON TRANSACTION.....................................................................26
3.2BEACON TIMING...............................................................................27
3.3PROCESS CHECK..............................................................................28
4TASKING.............................................................................................29
CL BY: 2355679
CL REASON: Section
1.5(c),(e)
DECL ON: 20351003
DRV FRM: COL 6-03
SECRET//ORCON//NOFORN

e-Highlighter

Click to send permalink to address bar, or right-click to copy permalink.

Un-highlight all Un-highlight selectionu Highlight selectionh