{
    "id": "1802067",
    "ioc": "b6987d7732888b73a836c7320fbdc0c0fe5d1238584be66f68371481dc3667ab",
    "ioc_type": "sha256_hash",
    "threat_type": "payload",
    "malware": "js.beavertail",
    "malware_printable": "BeaverTail",
    "malware_alias": null,
    "confidence_level": "100",
    "first_seen": "2026-04-29 11:37:11 UTC",
    "last_seen": null,
    "reporter": null,
    "reference": "https:\/\/github.com\/Novara1o1\/jackpot",
    "threatfox_link": "https:\/\/threatfox\/ioc\/1802067",
    "tags": [
        "base64-obfuscated-c2",
        "BeaverTail",
        "ContagiousInterview",
        "DPRK",
        "env-exfiltration",
        "function-eval",
        "jackpot",
        "Lazarus",
        "Novara1o1",
        "npm-prepare-hook",
        "Web3-targeting"
    ]
}