Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.
SECRET//ORCON//NOFORN
The default interval is defined as the default time between beacon
attempts. This value will be used after every successful beacon.
In the example above, the default interval of the target is set to one
minute.
Beacon Max Interval
The max interval is the maximum amount of time between beacons.
In the example above, the max interval of the target is set to five minutes.
Beacon Backoff Multiple
The backoff multiple is the multiplier used to increase the beacon interval
time after a communications failure
In the example above, the backoff multiple has been set to one. This will
cause the beacon interval to stay the same after a failure.
Beacon Consecutive Fails
The beacon consecutive fails is the maximum consecutive beacon failure
count for the target. If this number is reached the target Implant will
uninstall.
In the example above, the count value has been set to 10.
Beacon Jitter
The jitter is the maximum variance that will be applied to the current
beacon interval. The variance will be a random number between 0 and the
maximum.
In the example above, the jitter has been set to ten seconds.
Status Result Path
The status result path field is a custom status result that provides a listing of all
of the target implants directories.
XML Example
<StatusResultPath>
<InputPath>c:\temp\input\</InputPath>
<OutputPath>c:\temp\output\</OutputPath>
<StartupPath>c:\temp\startup\</StartupPath>
<StagingPath>c:\temp\staging\</StagingPath>
<PushPath>c:\temp\push\</PushPath>
</StatusResultPath>
Field Definitions
Paths
158
SECRET//ORCON//NOFORN