{
    "id": "1791884",
    "ioc": "113.249.109.219:7443",
    "ioc_type": "ip:port",
    "threat_type": "botnet_cc",
    "malware": "win.vshell",
    "malware_printable": "VShell",
    "malware_alias": null,
    "confidence_level": "100",
    "first_seen": "2026-04-15 12:45:25 UTC",
    "last_seen": null,
    "reporter": "0xThiebaut",
    "reference": "https:\/\/www.nviso.eu\/blog\/nviso-analyzes-vshell-post-exploitation-tool",
    "threatfox_link": "https:\/\/threatfox\/ioc\/1791884",
    "tags": [
        "NVISO",
        "Vshell"
    ]
}