EasyNight
Description
FireEye describes EASYNIGHT is a loader observed used with several malware families, including HIGHNOON and HIGHNOON.LITE. The loader often acts as a persistence mechanism via search order hijacking.
Examples include a patched bcrypt.dll with no other modification than an additional import entry, in the observed case ‘printwin.dll!gzwrite64’ (breaking the file signature).
Names
| Name |
|---|
| EasyNight |
Category
Malware
Type
- Loader
Information
Malpedia
Other Information
Uuid
2bf18644-2db8-4740-ac27-914991212366
Last Card Change
2021-04-24