{
    "id": "1777493",
    "ioc": "151.243.109.125:80",
    "ioc_type": "ip:port",
    "threat_type": "botnet_cc",
    "malware": "py.pxa_stealer",
    "malware_printable": "PXA Stealer",
    "malware_alias": "PXAStealer,PXA",
    "confidence_level": "90",
    "first_seen": "2026-03-28 06:45:01 UTC",
    "last_seen": "2026-03-27 21:37:25 UTC",
    "reporter": null,
    "reference": "https:\/\/www.virustotal.com\/gui\/file\/5d7c98d3eb2afba8d0e5c91949711b10524e42d2d28ba205dec93d0e875d4396",
    "threatfox_link": "https:\/\/threatfox\/ioc\/1777493",
    "tags": [
        "pxa_stealer",
        "snowlotus",
        "StoryShort",
        "telegram_dead_drop"
    ]
}