{
    "id": "1746813",
    "ioc": "91.92.240.114:20000",
    "ioc_type": "ip:port",
    "threat_type": "botnet_cc",
    "malware": "win.orcus_rat",
    "malware_printable": "Orcus RAT",
    "malware_alias": "Schnorchel",
    "confidence_level": "100",
    "first_seen": "2026-02-12 11:39:44 UTC",
    "last_seen": "2026-02-12 09:49:57 UTC",
    "reporter": null,
    "reference": "https:\/\/www.threat.rip\/file\/2dc1310a2a0eb9b773d07ff527972aea4b150c3beae2a9cfa3e938cf122b1343\/config",
    "threatfox_link": "https:\/\/threatfox\/ioc\/1746813",
    "tags": [
        "Adware",
        "discovery",
        "DonutLoader",
        "etherhiding",
        "evasion",
        "Loader",
        "orcus",
        "persistence"
    ]
}