51 lines
1.8 KiB
JSON
51 lines
1.8 KiB
JSON
{
|
|
"admin_list": {
|
|
"admin": "password"
|
|
},
|
|
"validate_useragent": true,
|
|
"c2_handler": "0.0.0.0:8443",
|
|
"comm_enc_key": "test@123",
|
|
"listeners": {
|
|
"doh-c2": {
|
|
"auth_count": 1,
|
|
"auth_type": false,
|
|
"c2_authkeys": [
|
|
"abcd@123"
|
|
],
|
|
"c2_uri": [
|
|
"dns-query"
|
|
],
|
|
"request_headers": {
|
|
"Content-Type": "application/dns-message"
|
|
},
|
|
"checkinA": "8.8.8.8",
|
|
"die_offline": false,
|
|
"dnshost": "dns1.evasion-labs.com,dns2.evasion-labs.com",
|
|
"rotational_host": "dns.google",
|
|
"host": "172.31.47.169",
|
|
"idleA": "8.8.4.4",
|
|
"spoofTxt": "google-site-verification=wD8N7i1JTNTkezJ49swvWW48f8_9xveREV4oB-0Hf5o",
|
|
"is_random": true,
|
|
"os_type": "windows",
|
|
"port": "53",
|
|
"ssl": true,
|
|
"useragent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.93 Safari/537.36",
|
|
"obfsleep": "Pooling-0",
|
|
"stomp": "chakra.dll",
|
|
"sleep": 1,
|
|
"rop_dll": "shcore.dll",
|
|
"entrypoint": "ntdll!TpReleaseCleanupGroupMembers",
|
|
"entrypoint_offset": "0x450",
|
|
"stack_chain": "win32u.dll!NtUserMsgWaitForMultipleObjectsEx+0x14,user32.dll!MsgWaitForMultipleObjectsEx+0x9e,SHCore.dll!SHTaskPoolQueueTask+0x1c81,user32.dll!DwmGetDxSharedSurface+0xe1",
|
|
"jitter": 0,
|
|
"delay_exec": 0,
|
|
"dns_interval": 100,
|
|
"key_strategy_type": "hostname",
|
|
"key_strategy_value": "DESKTOP-G15FRLS",
|
|
"killdate": "31 Dec 24 12:45 IST"
|
|
}
|
|
},
|
|
"ssl_cert": "cert.pem",
|
|
"ssl_key": "key.pem"
|
|
}
|