ccf32
S1043 · Windows
ccf32 is data collection malware that has been used since at least February 2019, most notably during the FunnyDream campaign.
there is also a similar x64 version.
ATT&CK S1043
Sigma rules0
YARA rules0
Live IOCs0