Spy 2015 Kurdish Patched _best_ -
A "patched" spyware means this wasn't a one-off attack. It was an evolved threat. Security researchers likely identified the first version ("Spy 2015 Kurdish") in late 2014 or early 2015. When antivirus signatures were updated to detect it, the attacker released a —new hashes, new command-and-control (C2) domains, and obfuscated code.
Given the 2015 timeline, the original tool could have been: spy 2015 kurdish patched