{
    "id": "1838159",
    "ioc": "cehoirfg.work",
    "ioc_type": "domain",
    "threat_type": "botnet_cc",
    "malware": "win.valley_rat",
    "malware_printable": "ValleyRAT",
    "malware_alias": "Winos",
    "confidence_level": "75",
    "first_seen": "2026-06-26 16:20:39 UTC",
    "last_seen": null,
    "reporter": "abuse_ch",
    "reference": "https:\/\/bazaar.abuse.ch\/sample\/36c3dc54b916de228ece4cff973790a2e1fa46b3bb6ce2f6660087d6dabe3ad4\/",
    "threatfox_link": "https:\/\/threatfox\/ioc\/1838159",
    "tags": [
        "valleyrat_s2"
    ]
}