Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

SECRET//NOFORN
4.2.1 (U) Execution Vector Configuration
Figure 1: (U) Drifting Deadline v1.1 – Execution Vector Configuration
(S) The interface will guide the user through the necessary configuration steps, and is laid
out in a way that the user must click through all the pages before configuring the drive.
(S) The first tab is the execution vector configuration page. The execution vector module
controls how the tool is executed. The user must select which execution vector they wish
to configure. They can choose from the following:
None
o No automatic execution vector, the user must double-click the final
executable on the thumb drive to execute Drifting Deadline.
EZCheese LinkFiles (Giraffe Links)
o Uses the EZCheese / Emotional Simian link files to gain execution.
o User has the option of configuring an x86 and x64 DLL that is auto-
executed by explorer whenever the link files are viewed in Explorer.
o User also configures the names of the link files, and which OSs to target.
o This execution vector has been patched for all versions of Windows
except for Windows XP
Lachesis LinkFiles (Okabi Links)
SECRET//NOFORN
3

e-Highlighter

Click to send permalink to address bar, or right-click to copy permalink.

Un-highlight all Un-highlight selectionu Highlight selectionh