{
    "id": "1742673",
    "ioc": "123.99.198.201:21391",
    "ioc_type": "ip:port",
    "threat_type": "botnet_cc",
    "malware": "win.ghostnet",
    "malware_printable": "Gh0stnet",
    "malware_alias": "Remosh",
    "confidence_level": "100",
    "first_seen": "2026-02-07 14:32:07 UTC",
    "last_seen": null,
    "reporter": null,
    "reference": "https:\/\/www.threat.rip\/file\/e09a44db407537ba495c22b663ce750d43ef87ad5f0a87df7facd17d81675cbc\/config",
    "threatfox_link": "https:\/\/threatfox\/ioc\/1742673",
    "tags": [
        "discovery",
        "Gh0st",
        "Gh0stRAT",
        "persistence",
        "PurpleFox",
        "RAT",
        "ROOTKIT",
        "trojan"
    ]
}