{
    "id": "1818421",
    "ioc": "c6d9ba54fffc9c7638e04df63e0bdd7f99daecd6b7bdb347d05a30fe16d68c7d",
    "ioc_type": "sha256_hash",
    "threat_type": "payload",
    "malware": "unknown",
    "malware_printable": "Unknown malware",
    "malware_alias": null,
    "confidence_level": "90",
    "first_seen": "2026-05-25 19:38:55 UTC",
    "last_seen": null,
    "reporter": null,
    "reference": null,
    "threatfox_link": "https:\/\/threatfox\/ioc\/1818421",
    "tags": [
        "AHK",
        "AutoHotKey",
        "Dropper",
        "miner",
        "monero",
        "sonbokli",
        "watchdog",
        "xmrig"
    ]
}