H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeMalware
External ID—
First seen2026-08-14
Last seen2026-08-14

Confidence

—

[ccf32](https://attack.mitre.org/software/S1043) is data collection malware that has been used since at least February 2019, most notably during the [FunnyDream](https://attack.mitre.org/campaigns/C0007) campaign; there is also a similar x64 version.(Citation: Bitdefender FunnyDream Campaign November 2020)

Labels

malware
13 recorded

Relationships

usesTechnique
usesTechnique
usesTechnique
usesTechnique
usesTechnique
usesTechnique
usesTechnique
usesTechnique
usesTechnique
usesCampaign
2 external

References

mitre-attack
S1043
open
Bitdefender FunnyDream Campaign November 2020
https://www.bitdefender.com/files/News/CaseStudies/study/379/Bitdefender-Whitepaper-Chinese-APT.pdf
open