MalwareBazaar Database

This page shows some basic information the YARA rule Gh0stKCP including corresponding malware samples.

Database Entry

YARA Rule:Gh0stKCP
Create hunting rule
Author:Netresec
Description:Checks for Gh0stKCP. Forked from @stvemillertime's KCP catchall rule.
Firstseen:2025-09-25 09:04:06 UTC
Lastseen:2025-12-26 03:40:09 UTC
Sightings:167

Malware Samples

The table below shows all malware samples that matching this particular YARA rule (max 1000).

Firstseen (UTC)SHA256 hashTagsSignatureReporter