Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 15:43:36 UTC
Home > List all groups > List all tools > List all groups using tool MASEPIE
 Tool: MASEPIE
Names MASEPIE
Category Malware
Type Downloader
Description
(BleepingComputer) The links redirect victims to malicious web resources that employ
JavaScript to drop a Windows shortcut file (LNK) that launches PowerShell commands to
trigger an infection chain for a new Python malware downloader called 'MASEPIE.'
MASEPIE establishes persistence on the infected device by modifying the Windows Registry
and adding a deceptively named LNK file ('SystemUpdate.lnk') to the Windows Startup folder.
Information
Malpedia Last change to this tool card: 17 January 2024
Download this tool card in JSON format
All groups using tool MASEPIE
Changed Name Country Observed
APT groups
 Sofacy, APT 28, Fancy Bear, Sednit 2004-Apr 2025
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=55915915-162d-4d8f-bbea-7f4c959973aa
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=55915915-162d-4d8f-bbea-7f4c959973aa
Page 1 of 1