Home > List all groups > List all tools > List all groups using tool EasyNight

Threat Group Cards: A Threat Actor Encyclopedia

Names	EasyNight
Category	Malware
Type	Loader
Description	FireEye describes EASYNIGHT is a loader observed used with several malware families, including HIGHNOON and HIGHNOON.LITE. The loader often acts as a persistence mechanism via search order hijacking. Examples include a patched bcrypt.dll with no other modification than an additional import entry, in the observed case 'printwin.dll!gzwrite64' (breaking the file signature).
Information	<https://docplayer.net/161018432-Double-dragon-apt41-a-dual-espionage-and-cyber-crime-operation.html>
Malpedia	<https://malpedia.caad.fkie.fraunhofer.de/details/win.easynight>

Last change to this tool card: 24 April 2021

Download this tool card in JSON format

Previous: EarthWorm
Next: Ebury

1 group listed (1 APT, 0 other, 0 unknown)

APT groups