{
    "id": "1801199",
    "ioc": "20bf8267c60aeaafb90c224d865e163401a016b8568f95a6f1743fc74af62d9e",
    "ioc_type": "sha256_hash",
    "threat_type": "payload",
    "malware": "unknown",
    "malware_printable": "Unknown malware",
    "malware_alias": null,
    "confidence_level": "100",
    "first_seen": "2026-04-28 05:55:22 UTC",
    "last_seen": null,
    "reporter": null,
    "reference": null,
    "threatfox_link": "https:\/\/threatfox\/ioc\/1801199",
    "tags": [
        "AMSI-BYPASS",
        "ClickFix",
        "MP3-HTA-polyglot",
        "mshta",
        "VBScript"
    ]
}