{
    "id": "1939037",
    "ioc": "http:\/\/154.91.63.119:8094\/?h=154.91.63.119&p=8094&t=tcp&a=w64&stage=true",
    "ioc_type": "url",
    "threat_type": "payload_delivery",
    "malware": "win.vshell",
    "malware_printable": "VShell",
    "malware_alias": null,
    "confidence_level": "95",
    "first_seen": "2026-09-27 15:18:18 UTC",
    "last_seen": null,
    "reporter": null,
    "reference": null,
    "threatfox_link": "https:\/\/threatfox\/ioc\/1939037",
    "tags": [
        "exe",
        "Vshell"
    ]
}