{
    "id": "1750343",
    "ioc": "192.236.154.249:6000",
    "ioc_type": "ip:port",
    "threat_type": "botnet_cc",
    "malware": "win.xworm",
    "malware_printable": "XWorm",
    "malware_alias": null,
    "confidence_level": "100",
    "first_seen": "2026-02-18 09:48:38 UTC",
    "last_seen": null,
    "reporter": null,
    "reference": "https:\/\/www.threat.rip\/file\/4b60c76c6c3e16c24020d89f73c8c7f230064ed912d87484c9e764ee49705308\/config",
    "threatfox_link": "https:\/\/threatfox\/ioc\/1750343",
    "tags": [
        "API-BASE64",
        "ARCH-SCR",
        "defense_evasion",
        "discovery",
        "execution",
        "RAT",
        "SUSP-POWERSHELL",
        "trojan",
        "XWorm"
    ]
}