Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

SECRET//ORCON//NOFORN
3.3 Footprint
Cricket maintains a minimal footprint on the target machine. Persistence modules
will, by necessity, expand that footprint. Persistence module users' guides should
be consulted accordingly.
Installer Executable
When using the Cricket EXE, the executable is placed and run from the target
filesystem with a user-determined name and location. During operation, the
Cricket executable is present in the process list. Once the installer has finished
its operation, the Cricket EXE self deletes.
The Cricket DLL is run from memory and will not explicitly touch the disk.
30
SECRET//ORCON//NOFORN

e-Highlighter

Click to send permalink to address bar, or right-click to copy permalink.

Un-highlight all Un-highlight selectionu Highlight selectionh