{
    "id": "1821814",
    "ioc": "rtfo.sa.com",
    "ioc_type": "domain",
    "threat_type": "botnet_cc",
    "malware": "win.nanocore",
    "malware_printable": "Nanocore RAT",
    "malware_alias": "Nancrat,NanoCore",
    "confidence_level": "75",
    "first_seen": "2026-06-03 12:05:35 UTC",
    "last_seen": null,
    "reporter": "abuse_ch",
    "reference": "https:\/\/bazaar.abuse.ch\/sample\/30a9f9a9f677e73b8adfc87a7b426317a1e968a320f01addb0d8af794a64282d\/",
    "threatfox_link": "https:\/\/threatfox\/ioc\/1821814",
    "tags": [
        "NanoCore"
    ]
}