{
    "id": "1744294",
    "ioc": "104.223.84.21:5656",
    "ioc_type": "ip:port",
    "threat_type": "botnet_cc",
    "malware": "win.remcos",
    "malware_printable": "Remcos",
    "malware_alias": "RemcosRAT,Remvio,Socmer",
    "confidence_level": "100",
    "first_seen": "2026-02-10 15:02:50 UTC",
    "last_seen": "2026-03-31 07:43:49 UTC",
    "reporter": null,
    "reference": "https:\/\/www.threat.rip\/file\/49c1226d79ee8c47fc700a6fe23223ea172b6662d38a0207b4ee79b8cbcb99db\/config",
    "threatfox_link": "https:\/\/threatfox\/ioc\/1744294",
    "tags": [
        "defense_evasion",
        "discovery",
        "execution",
        "persistence",
        "RAT",
        "remcos",
        "REMOTEHOST"
    ]
}