Setting up the MSBlaster Script Plugin.

Download the plugin.

Download the MSBlaster plugin from Here

Setup.

Unzip msblast_01.zip into a directory on the PatriotBox server. Launch the PatriotBox Console by double clicking on the orange icon in the system tray.

Next, right click in the services list and select "Add Script Service"

You will now have a new service in the service list labeled "0 Script", right click on that service and select properties.

For the port, enter 4444.

In the Command section, click on the browse button to the right of the box and browse to the location where you unzipped the msblast plugin file called MsBlast.exe.

Now select Save.

Click ok to finish. Now the last step is to enable the service. Right click on the just created script service and select enable.

You should now see a green icon next to the 4444 script service which means an active listening port.

When an MsBlaster event gets triggered, you will see four events show up in the Log.

PatriotBox will also capture the MsBlaster worm and place it in a protective directory for later analysis.

Since this is the actual MsBlaster worm, please take caution in handling the executable so as to not infect the PatriotBox server.

If you have any questions, please feel free to email us. Support