# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### AfterMidnight

# Assassin v1.2 Users Guide

1 March, 2012

- 1
- 2
…
- 150
- 151
- 152
- 153
- 154
…
- 187
- 188

SECRET//ORCON//NOFORN
<FileSize>3k231b</FileSize>
<CreatedTime>2011-12-21T16:15:11</CreatedTime>
<ModifiedTime>2011-12-21T16:15:11</ModifiedTime>
<AccessedTime>2011-12-21T16:15:11</AccessedTime>
</FileWalkRecord>
<FileWalkRecord>
<FileName>c:\temp\startup\~ffjas~1.urm</FileName>
<FileSize>1k988b</FileSize>
<CreatedTime>2011-12-21T16:04:17</CreatedTime>
<ModifiedTime>2011-12-21T16:14:07</ModifiedTime>
<AccessedTime>2011-12-21T16:04:17</AccessedTime>
</FileWalkRecord>
</StatusResultDirFiles>
<StatusResultComms>
<ChunkSize>1m</ChunkSize>
<TransportList>
<Transport type=”WebDAV” tries="2">
<Host>assassin_lp</Host>
<TempDir>c:\temp</TempDir>
<ShareList>
<Share>share1</Share>
</ShareList>
</Transport>
</TransportList>
</StatusResultComms>
<StatusResultList>
<Blacklist>
<Prog>avira.exe</Prog>
<Prog>avg.exe</Prog>
</Blacklist>
<Whitelist />
</StatusResultList>
</StatusResult>
Field Definitions
Target ID
The ID tag contains information describing what the target ID for the configured
Implant will be. The ID consists of a parent and child ID, each of which consists of
4 alpha-numeric characters. The parent ID is required and the child ID can be set
to be generated automatically at build time if it is left blank.
In the example above, the D is defined as ‘assne1jz’.
152
SECRET//ORCON//NOFORN

- 1
- 2
…
- 150
- 151
- 152
- 153
- 154
…
- 187
- 188