Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

SECRET//ORCON//NOFORN
The uninstall on time field describes the time which the target Implant is
set to uninstall. This may be blank depending if the value has been set or
not.
In the example above, the target Implant is set to uninstall at noon on
December 12
th
, 2012.
Install On Time
The install on time field describes the time that the target Implant was
first executed.
In the example above, the target Implant began execution for the first
time on December 12
th
, 2011 at 4:03:17 PM.
Execute Started Time
The execute started time is the last time that the target began executing.
This value is reset every time the target reboots.
In the example above, the target Implant began execution on December
12
th
, 2011 at 4:03:17 PM.
Status Result Beacon
The status result beacon field is a custom status result that provides all of the
current beacon settings.
XML Example
<StatusResultBeacon>
<BeaconInitialWait>1m</BeaconInitialWait>
<BeaconDefaultInterval>1m</BeaconDefaultInterval>
<BeaconMaxInterval>5m</BeaconMaxInterval>
<BeaconBackoffMultiple>1.0</BeaconBackoffMultiple>
<BeaconConsecutiveFails>10</BeaconConsecutiveFails>
<BeaconJitter>10s</BeaconJitter>
</StatusResultBeacon>
Field Definitions
Beacon Initial Wait
The initial wait is defined as the time the beacon will wait after execution
before starting the beacon process.
In the example above, the initial wait of the target is set to one minute.
Beacon Default Interval
The default interval is defined as the default time between beacon
attempts. This value will be used after every successful beacon.
In the example above, the default interval of the target is set to one
minute.
170
SECRET//ORCON//NOFORN

e-Highlighter

Click to send permalink to address bar, or right-click to copy permalink.

Un-highlight all Un-highlight selectionu Highlight selectionh