Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.
SECRET//NOFORN
(S) The deployment module controls the look of the tool on disk. BK requires one EXE,
one deployment config file, and one payload config file. How these files appear or hide
on disk is dependent upon this module.
• Full On Disk
o You specify names for each of the three Drifting Deadline config files.
This deployment method is required if you’re doing an execution vector of
“none”
• Condensed on Disk
o You specify the name of one file, which contains all three Drifting
Deadline config files. You also must specify the name and path on target
where the main Drifting Deadline executable must be dropped.
4.2.3 (U) Payload Configuration
Figure 3: (U) Drifting Deadline v1.1 – Payload Configuration
SECRET//NOFORN
5