Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

UNCLASSIFIED//FOUO
C Struct – Hungarian notation
typedef struct tagAthenaConfig
{
struct
{
ULONG dID; // dword - config ID - generated by python for
ULONG dKey; // buffer - aes key - 32 bytes
ULONG dIV; // buffer - aes iv - 16 bytes
ULONG dDynConfigType; // dword - ATHENA_DYNCONFIG_TYPE_XXX
ULONG dDynConfigPath; // string - location of dynamic config data
} Target;
struct
{
ULONG dInterval; // dword - frequency - how often to beacon in
ULONG dJitter; // dword - % of frequency to alter beacon timing
ULONG dBootDelay; // dword - initial delay after boot before any
ULONG dHibernationTime; // dword - initial time to wait after install
ULONG dTaskingDelay; // dword - amount of time between receiving
ULONG dServers; // string list of server domain names (DNS) or ip
ULONG dPort; // dword - specific port used to communicate
ULONG dProxyPort; // dword - proxy port number - 0 means do not use
ULONG dProxyAddress; // dword - ip address - 0 means do not use
ULONG dUserAgentString; // string - user agent string
} Beacon;
struct
{
ULONG dFileProcessingPath; // string - path used for default file processing
ULONG dBatchExecutionTimeout; // dword - specific amount of time when the batch
ULONG dCommandExecutionTimeout; // dword - specific amount of time when the
ULONG dMaxKBPSThroughput; // dword - maximum kilobytes per second throughput
ULONG dMaxCpuUtilization; // dword - maximum percentage of cpu utilization
ULONG dMaxProcessingDataSize; // dword - maximum amount of data processed during
} Tasking;
struct
{
ULONG dDateAndTime; // time - specific time to uninstall
ULONG dDeadManDelay; // dword - amount of time to delay until uninstall
ULONG dBeaconFailures; // dword - number of failed beacon to allow before
ULONG dKillFilePath; // string - location of the kill file
} Uninstall;
} ATHENA_CONFIG, *PATHENA_CONFIG;
UNCLASSIFIED//FOUO

e-Highlighter

Click to send permalink to address bar, or right-click to copy permalink.

Un-highlight all Un-highlight selectionu Highlight selectionh