WikiLeaks - Vault 7: Projects

# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### AfterMidnight

# Assassin v1.1 Users Guide

1 March, 2012

- 1
- 2
…
- 151
- 152
- 153
- 154
- 155
…
- 186
- 187

SECRET//ORCON//NOFORN
In the example above, the target Implant began execution for the first
time on December 12
th
, 2011 at 4:03:17 PM.
Execute Started Time
The execute started time is the last time that the target began executing.
This value is reset every time the target reboots.
In the example above, the target Implant began execution on December
12
th
, 2011 at 4:03:17 PM.
Status Result Beacon
The status result beacon field is a custom status result that provides all of the
current beacon settings.
XML Example
<StatusResultBeacon>
<BeaconInitialWait>1m</BeaconInitialWait>
<BeaconDefaultInterval>1m</BeaconDefaultInterval>
<BeaconMaxInterval>5m</BeaconMaxInterval>
<BeaconBackoffMultiple>1.0</BeaconBackoffMultiple>
<BeaconConsecutiveFails>10</BeaconConsecutiveFails>
<BeaconJitter>10s</BeaconJitter>
</StatusResultBeacon>
Field Definitions
Beacon Initial Wait
The initial wait is defined as the time the beacon will wait after execution
before starting the beacon process.
In the example above, the initial wait of the target is set to one minute.
Beacon Default Interval
The default interval is defined as the default time between beacon
attempts. This value will be used after every successful beacon.
In the example above, the default interval of the target is set to one
minute.
Beacon Max Interval
The max interval is the maximum amount of time between beacons.
In the example above, the max interval of the target is set to five minutes.
Beacon Backoff Multiple
The backoff multiple is the multiplier used to increase the beacon interval
time after a communications failure
153
SECRET//ORCON//NOFORN

- 1
- 2
…
- 151
- 152
- 153
- 154
- 155
…
- 186
- 187