# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### AfterMidnight

# Assassin v1.2 Users Guide

1 March, 2012

- 1
- 2
…
- 53
- 54
- 55
- 56
- 57
…
- 187
- 188

SECRET//ORCON//NOFORN
1 Injection Launcher
The Injection Launchers provide persistence and process injection for the Assassin
Implant. It carries an Implant DLL embedded as a resource, which it is responsible
for deploying by injecting into an existing SYSTEM process. Implants are typically
injected into the netsvcs svchost.
The Launcher is only able to inject the Implant DLL into SYSTEM processes of the
same bitness as itself. The Injection Extractor provides deployment flexibility by
allowing operators to deploy Assassin without prior knowledge of the target
environment. The Extractor carries both the 32- and 64-bit Launchers as resources
and deploys the appropriate version based on the operating system.
55
SECRET//ORCON//NOFORN

- 1
- 2
…
- 53
- 54
- 55
- 56
- 57
…
- 187
- 188