Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

SECRET//ORCON//NOFORN
Target Version
The target version field specifies the version of the Assassin Implant that
provided the results.
In the example above, the code version returned from the Implant is Assassin
version 1.1
Target Current Time
The target current time defines the exact time on the target when the task was
executed.
In the example above, the current time of the target when the task ran was
December 21
st
, 2011 at 4:15:11 PM.
Status Result Basic
The status result basic field is a custom status result that provides some of the
generic Implant settings as described below.
XML Example
<StatusResultBasic>
<HibernateSeconds>1m</HibernateSeconds>
<UninstallOnDate>2012-12-31T12:00:00<UninstallOnDate/>
<InstalledOnDate>2011-12-21T16:03:17</InstalledOnDate>
<ExecuteStartedDate>2011-12-21T16:03:17</ExecuteStartedDate>
</StatusResultBasic>
Field Definitions
Hibernate Seconds
Hibernate seconds field shows the amount of time that the target
hibernated before starting communication with the LP.
In the example above, the target would have remained inactive for one
minute before beginning the beacon cycle.
Uninstall On Time
The uninstall on time field describes the time which the target Implant is
set to uninstall. This may be blank depending if the value has been set or
not.
In the example above, the target Implant is set to uninstall at noon on
December 12
th
, 2012.
Install On Time
The install on time field descripts the time that the target Implant was first
executed.
153
SECRET//ORCON//NOFORN

e-Highlighter

Click to send permalink to address bar, or right-click to copy permalink.

Un-highlight all Un-highlight selectionu Highlight selectionh