Agent Tesla - Malware Samples
500 samples tracked (rolling 30 days)
Last updated: 2026-10-04
This page lists the most recent Agent Tesla malware samples collected from MalwareBazaar. Each entry includes the SHA256 hash (linked to the MalwareBazaar sample page), original file name, file type, size, and VirusTotal detection rate where available. Samples are updated daily and retained for a rolling 30-day window.
How to Use This Data
Security teams can use these hashes in several ways. Import them into your SIEM or EDR platform to detect known Agent Tesla variants in your environment. Cross-reference file names against your email gateway logs to identify phishing campaigns delivering this family. The file type distribution reveals which delivery formats are currently in use - a shift from .exe to .msi or .js may indicate the operators are adapting to your defenses. Samples with low or missing VirusTotal detection rates are the most dangerous - these are fresh variants that may bypass signature-based protection.
About the Data
All samples are sourced from MalwareBazaar, a free malware sample sharing platform operated by abuse.ch. Detection rates come from VirusTotal. This data is provided for defensive purposes only. For the latest Agent Tesla indicators of compromise including C2 servers and domains, see the IOC page.
| SHA256 | File Name | Type | Size | Detection | First Seen | Country |
|---|---|---|---|---|---|---|
| 46471660502aed37... | Rechnung 103971 GmbH 10-02-2026.rar | rar | 483.5 KB | 23/61 | 2026-10-04 | - |
| 45251b761afc2e6d... | Comprobante de pago.js | js | 30.8 KB | 26/61 | 2026-10-02 | - |
| 11deb13e28a8e3a9... | Rechnung 103971 GmbH 10-02-2026.js | js | 688.2 KB | 25/56 | 2026-10-02 | - |
| a02e305139e8a68b... | Purchase Order 028.rar | rar | 1.3 MB | 28/56 | 2026-10-02 | - |
| a36e737f966731c0... | PO2610-0004 11026.js | js | 1.4 MB | 21/61 | 2026-10-01 | - |
| bedb7fe1edae3544... | PO-002127.js | js | 1.5 MB | 26/61 | 2026-10-01 | - |
| e84ffb9d7b3a622f... | New order.JS | js | 3.2 MB | 6/61 | 2026-10-01 | - |
| 39ef417ff0467a60... | Payment Confirmation_Swift – MT103.JS | js | 3.2 MB | 4/61 | 2026-10-01 | - |
| f9dc18cc11328291... | aongnxsh.JS | js | 3.3 MB | 24/61 | 2026-10-01 | - |
| 1d781609e5e4af51... | PRE ALERT 4106958820.js | js | 688.4 KB | 26/61 | 2026-10-01 | - |
| d4e50ed985bad6e5... | Shipping Documents - PO-2603113056899.JS | js | 3.3 MB | - | 2026-10-01 | - |
| 824c1b3a2cff96ea... | CONFIRMI.JS | js | 1.4 MB | - | 2026-10-01 | - |
| 1d6472657471d066... | Purchase_OrderX#4531101604.xlam | xlsx | 641.2 KB | - | 2026-10-01 | - |
| b15494c671395c45... | Factura pendiente.JS | js | 3.2 MB | - | 2026-10-01 | - |
| e1b30def98704eda... | statement-103217.js | js | 683.2 KB | - | 2026-10-01 | - |
| e76c5c79066d31f5... | Shipment_Invoice_and_Packing_List.com | exe | 766.0 KB | - | 2026-10-01 | - |
| b1ac46bf1cfdbd8a... | RFQ - NHIS 00264859932.js | js | 690.8 KB | - | 2026-09-30 | - |
| 2b010a2351c9e8ee... | P.O 2026-037250.js | js | 672.4 KB | - | 2026-09-30 | - |
| 62165ab180dc2a82... | SHIPMENT DOCUMENTS SCAN_92926tqyp.js | js | 674.4 KB | - | 2026-09-30 | - |
| 7ac3ee7407e452f0... | SHIPMENT.js | js | 684.6 KB | - | 2026-09-30 | - |
| 36cb0eb0fad4a118... | RFQ-9260158400.js | js | 685.6 KB | - | 2026-09-30 | - |
| 63cf3c5fc8658791... | RFQ 5704251439.vbs | vbs | 5.2 MB | - | 2026-09-29 | - |
| c571da34ec2edce2... | MR-2026-135.MSI | msi | 564.0 KB | - | 2026-09-29 | - |
| 052930158bc4e129... | Estado de cuenta (SOA).js | js | 677.3 KB | - | 2026-09-29 | - |
| 64fa2a3b7846e061... | ORDER NOTE.js | js | 664.6 KB | - | 2026-09-29 | - |
| e43f11909ffd6eef... | New Order SPE280903-1.js | js | 691.9 KB | - | 2026-09-29 | - |
| 71343c483f162010... | INVOICE#R09.js | js | 671.8 KB | - | 2026-09-29 | - |
| 52f36733937caeca... | Shipment Documents.JS | js | 3.3 MB | - | 2026-09-28 | - |
| 87ebb8f872170895... | NEW PO 32300337.js | js | 689.5 KB | - | 2026-09-28 | - |
| 8c99f17e2927d4a3... | f45b853c-c9d3-495e-9acb-d41a4a90029f.exe | exe | 239.5 KB | - | 2026-09-28 | - |
| a2f1061b5a9ca952... | MOLD CC 312202.JS | js | 5.3 MB | - | 2026-09-28 | - |
| da89d28dc35eeb35... | PRE-ALERT C2025122601.js | js | 687.7 KB | - | 2026-09-28 | - |
| f77d2bc086e26b4a... | Factura-PAR2026A01-0565.JS | js | 3.3 MB | - | 2026-09-28 | - |
| 156587f7d2c1c5be... | SecuriteInfo.com.Trojan.Siggen34.18774.960.2461 | exe | 3.3 MB | - | 2026-09-28 | - |
| c5b8ac5d26a96a9f... | Comprobante de pago.js | js | 32.5 KB | - | 2026-09-28 | - |
| a2a3a59bff8f5119... | Quotation.js | js | 29.0 MB | 7/60 | 2026-08-30 | - |
| be0627710ef98d64... | RFQ-PO_SD-36070.JS | js | 3.7 MB | 26/60 | 2026-08-28 | - |
| 67ed68462fe1c9ca... | confirmación de pago.js | js | 303.1 KB | 6/60 | 2026-08-28 | - |
| dc8ba3e097af2db0... | COMPROBANTE DE PAGO DE BANORTE.js | js | 32.6 MB | 8/59 | 2026-08-28 | - |
| b346ec4586cb8adb... | Bank Details For Payment.JS | js | 3.7 MB | 11/59 | 2026-08-28 | - |
| 5f78e39790abaf82... | file.vbs | vbs | 26.1 KB | 12/60 | 2026-08-28 | - |
| 0d736040f6fcab61... | Copia de transferencia de pago.exe | exe | 462.0 KB | 32/52 | 2026-08-28 | - |
| 993da978267d7d0f... | file.vbs | vbs | 23.7 KB | 17/60 | 2026-08-28 | - |
| 9af4e75bc2a28756... | PO 787077.vbs | vbs | 610.6 KB | 24/60 | 2026-08-28 | - |
| 2f7d153658df033f... | New order 710943250.js | js | 785.8 KB | 22/58 | 2026-08-28 | - |
| 730e01611dbb030d... | REF Order_787077.js | js | 826.4 KB | - | 2026-08-28 | - |
| b7a18c84f015e5cb... | PO#675514255.js | js | 840.0 KB | - | 2026-08-28 | - |
| e46d75c20e44f9c4... | PO# 4508555536.js | js | 823.8 KB | - | 2026-08-28 | - |
| fe4fc056f4bf55b8... | transferencia-5463.js | js | 35.5 MB | - | 2026-08-28 | - |
| 6588f77680610d19... | HJR04806-LMA0065-AXU0296.js | js | 601.7 KB | - | 2026-08-28 | - |
| f206a9fdfcd50225... | 0009384776453647888900.exe | exe | 479.9 KB | - | 2026-08-27 | - |
| 5d19809378bb9770... | Factura comercial y lista de empaque.exe | exe | 470.5 KB | - | 2026-08-27 | - |
| 53cebec947fce207... | Payment Receipt.vbs | vbs | 604.8 KB | - | 2026-08-27 | - |
| bc8db66b3f7b03b8... | confirmación de pago.js | js | 33.4 MB | - | 2026-08-27 | - |
| 5cd0967055b01843... | PO#675514255.js | js | 37.5 MB | - | 2026-08-27 | - |
| ea655f8ab0bac36a... | DTG068383-KXC783830-MV83582382.js | js | 603.5 KB | - | 2026-08-27 | - |
| 4b6da86d0199245d... | COMPROBANTE DE PAGO DE BANORTE.js | js | 35.5 MB | - | 2026-08-27 | - |
| 069db9eb6655ea38... | Proforma Invoice.exe | exe | 984.5 KB | - | 2026-08-27 | - |
| aa95aab22e9f666d... | RFQ 2601.JS | js | 3.9 MB | - | 2026-08-26 | - |
| a0a73c12faa86384... | transferencia-98758.00005672-77.js | js | 33.4 MB | - | 2026-08-26 | - |
| 0c51274ff80c04e9... | PO-ADT26_0076.JS | js | 4.0 MB | - | 2026-08-26 | - |
| 86c7db6ffb4bdf3a... | Invoice_2026-16157_pdf.JS | js | 4.0 MB | - | 2026-08-26 | - |
| e3b04556636dc6b7... | lebgjqzp.JS | js | 4.0 MB | - | 2026-08-26 | - |
| b764f64137330577... | PO-000191 Shipment Swift.JS | js | 4.0 MB | - | 2026-08-26 | - |
| bcfd3e59a8f8d4be... | SWIFT Transfer_103_TT_USD.26.08.2026.JS | js | 4.0 MB | - | 2026-08-26 | - |
| 088a236812e1eadd... | Bank_Copy_01336_8.25.2026.JS | js | 2.2 MB | - | 2026-08-26 | - |
| 7add4cfec1b0605b... | RFQSPS-4875.JS | js | 2.2 MB | - | 2026-08-26 | - |
| 5bd98294b521364b... | PURCHASE ORDER – (260019-18082026).JS | js | 4.0 MB | - | 2026-08-26 | - |
| f68ef6e15f326e24... | payment-pdf.JS | js | 4.0 MB | - | 2026-08-26 | - |
| a8e676aad8cd3630... | shcfueft.JS | js | 3.6 MB | - | 2026-08-26 | - |
| e3965509664cf5c4... | MT103payment_from our customer.js | js | 586.3 KB | - | 2026-08-26 | - |
| 1f9eb3087aa6a443... | PO-000191 Shipment Swift.JS | js | 4.0 MB | - | 2026-08-26 | - |
| 0dfece8dd1637392... | PO_JT014541.rar | rar | 1.2 MB | - | 2026-08-26 | - |
| 3ab6ed7b7cb21244... | New-Purchase-Order353250826.exe | exe | 699.8 KB | - | 2026-08-25 | - |
| 40d48781568820a8... | PO 041-P14013-398.pdf.bat | bat | 5.2 KB | - | 2026-08-25 | - |
| 0d3c2491d4240bec... | Project PA2231- Detox India Private Limited - WBS- Z1E.JS | js | 3.6 MB | - | 2026-08-25 | - |
| 30972f27d7a7608a... | Productlijst SAFAGA PORT DI - 60181207.hta | hta | 1.1 MB | - | 2026-08-24 | - |
| bd21fdda899e4f6c... | cubkcyhj.JS | js | 3.6 MB | - | 2026-08-24 | - |
| 2acc3c29b9551744... | ORDER_10.BAT | exe | 511.1 KB | - | 2026-08-24 | - |
| 941ad06660c3a0da... | POAOSMACCN26081501.rar | rar | 12.1 KB | - | 2026-08-24 | - |
| f611d9ad58f5ad72... | T.T Copy.JS | js | 3.2 MB | 8/60 | 2026-08-22 | - |
| 50172f6d874ad77c... | Instant Transfer Receipt.js | js | 2.1 MB | 22/53 | 2026-08-21 | - |
| ed55240010a53cbd... | O2 SCH 064D LOGISTICS AND SHIPMENT.js | js | 2.1 MB | 24/59 | 2026-08-21 | - |
| 7bb6e05a13c2dce3... | 01 SHIPMENT FRIEGHT QUOTATION.js | js | 2.0 MB | 30/59 | 2026-08-21 | - |
| 779ceaf8a70d6c17... | Instant Transfer Receipt.js | js | 4.1 MB | 18/58 | 2026-08-21 | - |
| d026e899f80a5a66... | payment advise.js | js | 2.1 MB | 20/59 | 2026-08-21 | - |
| 43c31beb807bd7b6... | Order-10045_2026-08-21.exe | exe | 1.2 MB | 30/55 | 2026-08-21 | - |
| e17acdfda0612089... | Quote for Urgent delivery __ 08.20.2026 xls.js | js | 593.5 KB | 13/60 | 2026-08-20 | - |
| 936d67e1beb2c863... | AL_FUTTAIM_Enquiry_List_no#1DSQV00013019.JS | js | 3.1 MB | 24/60 | 2026-08-20 | - |
| d478ce0f1dfabc91... | PO 0044567.js | js | 1.2 MB | 13/61 | 2026-08-20 | - |
| 96e2c8aba36cb2e7... | Instant Transfer Receipt.js | js | 2.1 MB | - | 2026-08-20 | - |
| 0b7cfa65175ad005... | SecuriteInfo.com.Win32.MalwareX-gen.52173122 | exe | 1020.5 KB | - | 2026-08-20 | - |
| ea87ee70df6dc5e8... | Revised-New-PO-0011066.exe | exe | 322.5 KB | - | 2026-08-20 | - |
| dec621da52182ff4... | comprobante de pago.js | js | 1.1 MB | - | 2026-08-20 | - |
| 20d1651edd2453c2... | PO#7889296.JS | js | 3.1 MB | - | 2026-08-20 | - |
| 22f66ced416455a6... | RFQ_Best_Offer_Request.JS | js | 3.1 MB | - | 2026-08-20 | - |
| 342c53bc6da74c72... | SOA.PDF.JS | js | 3.6 MB | - | 2026-08-20 | - |
| ce4e606063e2de01... | Req_270_002.vbs | vbs | 15.9 KB | - | 2026-08-20 | - |
| 6e482ca3bf3fcc53... | 75126563c59c3503c9bb69855a8a4f4a.exe | exe | 952.5 KB | - | 2026-08-20 | - |
| b51905e75a4c231a... | Invoice.JS | js | 3.6 MB | - | 2026-08-20 | - |