ctrlINT What the industry said about every indicator, with the quote

KGH_SPYMalware

KGH_SPY is a modular suite of tools used by Kimsuky for reconnaissance, information stealing, and backdoor capabilities. KGH_SPY derived its name from PDB paths and internal names found in samples containing "KGH".From MITRE ATT&CK

0 reports

No report names it yet.

Thanks — we review every report.

Report a wrong match
What is wrong with KGH_SPY here?
No account needed. We do not store your IP address.