{
    "id": "1767068",
    "ioc": "7ccf7e8050c66eed69f35159042d8043032f8afe48ae1f51fce75ce2c51395f2",
    "ioc_type": "sha256_hash",
    "threat_type": "payload",
    "malware": "win.beardshell",
    "malware_printable": "BEARDSHELL",
    "malware_alias": null,
    "confidence_level": "95",
    "first_seen": "2026-03-15 16:31:27 UTC",
    "last_seen": null,
    "reporter": null,
    "reference": "https:\/\/www.trellix.com\/blogs\/research\/apt28-operation-phantom-net-voxel\/",
    "threatfox_link": "https:\/\/threatfox\/ioc\/1767068",
    "tags": [
        "APT28",
        "BeardShell",
        "Covenant",
        "CVE-2026-21509",
        "GRU",
        "NotDoor",
        "Sednit"
    ]
}