Metasploit Stager - Threat Group Cards: A Threat Actor Encyclopedia Archived: 2026-04-05 18:11:30 UTC Home > List all groups > List all tools > List all groups using tool Metasploit Stager Tool: Metasploit Stager Names Metasploit Stager Category Tools Type Downloader, Loader Description The Metasploit Framework decouples exploits from the stuff that gets executed after successful exploitation (the payload). Payloads in the Metasploit Framework are also divided into two parts, the stager and the stage. The stager is responsible for downloading a large payload (the stage), injecting it into memory, and passing execution to it. Information Last change to this tool card: 20 April 2020 Download this tool card in JSON format All groups using tool Metasploit Stager Changed Name Country Observed APT groups Cobalt Group 2016-Oct 2019 1 group listed (1 APT, 0 other, 0 unknown) Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=826053a8-18fd-4e08-b115-13b3a7ab42fb https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=826053a8-18fd-4e08-b115-13b3a7ab42fb Page 1 of 1