{ "admin_list": { "admin": "password" }, "validate_useragent": true, "c2_handler": "0.0.0.0:8443", "comm_enc_key": "test@123", "listeners": { "doh-c2": { "auth_count": 1, "auth_type": false, "c2_authkeys": [ "abcd@123" ], "c2_uri": [ "dns-query" ], "request_headers": { "Content-Type": "application/dns-message" }, "checkinA": "8.8.8.8", "die_offline": false, "dnshost": "dns1.evasion-labs.com,dns2.evasion-labs.com", "rotational_host": "dns.google", "host": "172.31.47.169", "idleA": "8.8.4.4", "spoofTxt": "google-site-verification=wD8N7i1JTNTkezJ49swvWW48f8_9xveREV4oB-0Hf5o", "is_random": true, "os_type": "windows", "port": "53", "ssl": true, "useragent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.93 Safari/537.36", "obfsleep": "Pooling-0", "stomp": "chakra.dll", "sleep": 1, "rop_dll": "shcore.dll", "entrypoint": "ntdll!TpReleaseCleanupGroupMembers", "entrypoint_offset": "0x450", "stack_chain": "win32u.dll!NtUserMsgWaitForMultipleObjectsEx+0x14,user32.dll!MsgWaitForMultipleObjectsEx+0x9e,SHCore.dll!SHTaskPoolQueueTask+0x1c81,user32.dll!DwmGetDxSharedSurface+0xe1", "jitter": 0, "delay_exec": 0, "dns_interval": 100, "key_strategy_type": "hostname", "key_strategy_value": "DESKTOP-G15FRLS", "killdate": "31 Dec 24 12:45 IST" } }, "ssl_cert": "cert.pem", "ssl_key": "key.pem" }