{
    "id": "389273",
    "ioc": "crmweb.info",
    "ioc_type": "domain",
    "threat_type": "payload_delivery",
    "malware": "win.emotet",
    "malware_printable": "Emotet",
    "malware_alias": "Geodo,Heodo",
    "confidence_level": "100",
    "first_seen": "2022-02-18 20:16:58 UTC",
    "last_seen": null,
    "reporter": "nickkuechel",
    "reference": "https:\/\/unit42.paloaltonetworks.com\/new-emotet-infection-method\/",
    "threatfox_link": "https:\/\/threatfox\/ioc\/389273",
    "tags": [
        "emotet"
    ]
}