Skip to content
Threat Feed
medium advisory

NetWire RC: New Indicator Update

ThreatFox reported three new payload indicators of compromise associated with NetWire RC on 2026-11-04.

Triage facts

Revision 1
Evidence
Unknown
Severity
Medium
Sources
2 public sources
Freshness
Revision 1Nov 5, 13:38 UTC
Detection
3 IOCs
Source quality
B2Roughly even chance

On November 4, 2026, ThreatFox identified three new indicators of compromise for the NetWire RC malware (win.netwire). The indicators consist of one MD5 hash, one SHA1 hash, and one SHA256 hash, all categorized as payloads with a confidence level of 95%.

Indicators of compromise

1

hash_md5

1

hash_sha1

1

hash_sha256

TypeValue
hash_md5e89632a73f0657995d5394173b64a513
hash_sha181beedfdecc403cbf3bae371c7efbee362100d76
hash_sha25661e6fe15b423177661294e31bf32f9112bfb531a71a79327eb8dbc732278e8c1