KGH_SPY
Description
(Cybereason) During our analysis, Cybereason Nocturnus discovered a new malware suite dubbed “KGH” which contains several modules used as spyware. The name “KGH” is derived from the PDB path and internal names found in the malware samples. A possible link to North Korean attacks referencing the name “KGH” was mentioned in 2017 in a research by Ahnlab, however it is unclear whether it is related to the same malware authors.
Names
| Name |
|---|
| KGH_SPY |
| KGH Spyware Suite |
Category
Malware
Type
- Backdoor
- Info stealer
- Keylogger
Information
Mitre Attack
Malpedia
Other Information
Uuid
1603714e-0992-4188-bbc9-5a506daf83e7
Last Card Change
2022-12-30