{
    "id": "1744385",
    "ioc": "xwlmi.duckdns.org",
    "ioc_type": "domain",
    "threat_type": "botnet_cc",
    "malware": "win.remcos",
    "malware_printable": "Remcos",
    "malware_alias": "RemcosRAT,Remvio,Socmer",
    "confidence_level": "75",
    "first_seen": "2026-02-10 20:30:44 UTC",
    "last_seen": "2026-02-23 12:00:09 UTC",
    "reporter": "abuse_ch",
    "reference": "https:\/\/bazaar.abuse.ch\/sample\/70115960f384f237162bd6a7533441b322afeb16a2364ecc6bc36b54945d8f2e\/",
    "threatfox_link": "https:\/\/threatfox\/ioc\/1744385",
    "tags": [
        "remcos"
    ]
}