Agent Tesla - Malware Samples
500 samples tracked (rolling 30 days)
Last updated: 2026-08-07
This page lists the most recent Agent Tesla malware samples collected from MalwareBazaar. Each entry includes the SHA256 hash (linked to the MalwareBazaar sample page), original file name, file type, size, and VirusTotal detection rate where available. Samples are updated daily and retained for a rolling 30-day window.
How to Use This Data
Security teams can use these hashes in several ways. Import them into your SIEM or EDR platform to detect known Agent Tesla variants in your environment. Cross-reference file names against your email gateway logs to identify phishing campaigns delivering this family. The file type distribution reveals which delivery formats are currently in use - a shift from .exe to .msi or .js may indicate the operators are adapting to your defenses. Samples with low or missing VirusTotal detection rates are the most dangerous - these are fresh variants that may bypass signature-based protection.
About the Data
All samples are sourced from MalwareBazaar, a free malware sample sharing platform operated by abuse.ch. Detection rates come from VirusTotal. This data is provided for defensive purposes only. For the latest Agent Tesla indicators of compromise including C2 servers and domains, see the IOC page.
| SHA256 | File Name | Type | Size | Detection | First Seen | Country |
|---|---|---|---|---|---|---|
| bd29e2e123c5c3fd... | Quotation Request for Project BNC-26.js | js | 1.3 MB | 25/60 | 2026-08-07 | - |
| 707c9077934fbbf8... | Nomina 08.6.2026.pdf.js | js | 82.3 KB | 26/60 | 2026-08-07 | - |
| 7bd02f6e1de477b2... | transferencia-98758.0000001.js | js | 14.0 MB | 25/60 | 2026-08-07 | - |
| d21d86002931aaac... | Nomina 08.6.2026.pdf.js | js | 82.2 KB | 24/61 | 2026-08-07 | - |
| e177832273e9347a... | Quotation_Requirement.js | js | 1013.0 KB | 22/60 | 2026-08-07 | - |
| d697ffce28c39d65... | Documento di preventivo_ 07.08.2026 xls.js | js | 1.3 MB | 24/60 | 2026-08-07 | - |
| 925f55d345cd7029... | Sevkiyat Belgeleri Ektedir Lütfen Kontrol Edip Onaylayınız pdf.JS | js | 3.2 MB | 29/60 | 2026-08-07 | - |
| 5067ae4261feea16... | Urgent Order.exe | exe | 1.1 MB | 51/70 | 2026-08-06 | - |
| 5fc8146428d65afc... | Urgent Order #PDF.js | js | 2.1 MB | 28/60 | 2026-08-06 | - |
| c5ada905e0d97815... | COMPROBANTE DE TRANSFERENCIA.JS | js | 2.8 MB | 29/59 | 2026-08-06 | - |
| a350ab3e8b5c27a4... | Detalles de los recibos de pago.JS | js | 2.8 MB | - | 2026-08-06 | - |
| 4bf9c547ab27ca81... | Curriculum Vitae Isabel Luca.JS | js | 3.3 MB | - | 2026-08-06 | - |
| 76187f95a48f5e16... | Scan_008674.js | js | 1.2 MB | - | 2026-08-06 | - |
| d2989c7149d41251... | Zahlungs-IBAN-Bestätigung 06-08-2026 pdf.vbs | vbs | 1.3 MB | - | 2026-08-06 | - |
| c35c2d9570c711b9... | Copia de confirmacion de pago.vbs | vbs | 924.0 KB | - | 2026-08-06 | - |
| 1e9fba96624c720a... | ORDER RFQ 1180.JS | js | 2.8 MB | - | 2026-08-06 | - |
| 33a236fda76a3d96... | orden de compra.js | js | 1012.7 KB | - | 2026-08-06 | - |
| 0d69fb6ecc1ccb82... | transferencia-98758.001.js | js | 27.7 MB | - | 2026-08-06 | - |
| 7f7a9881d6ac026d... | Quotation.JS | js | 2.8 MB | - | 2026-08-06 | - |
| 4d2d933833407d7a... | 見積請求書.JS | js | 2.8 MB | - | 2026-08-06 | - |
| a7ee2070a76bc479... | comprobante de pago.js | js | 1.0 MB | - | 2026-08-06 | - |
| 06794e18354508e7... | Payment Plan - UNITEX SOA JUN-AUG.js | js | 1.3 MB | - | 2026-08-06 | - |
| f5f8b6b6eac410d4... | RFQ AUG6 2026.JS | js | 2.8 MB | - | 2026-08-06 | - |
| 368c897a66748451... | Proforma Invoice 40966.js | js | 15.0 MB | - | 2026-08-06 | - |
| 4c1c043fa4865c68... | Bill of Quantities.xls | xls | 204.0 KB | - | 2026-08-06 | - |
| 1ace1637c592ae37... | Architectural_Floor_Plans.JS | js | 2.8 MB | - | 2026-08-05 | - |
| 86039c48436ab506... | Sevkiyat Belgeleri..JS | js | 2.9 MB | - | 2026-08-05 | - |
| 6ef48d93f657cad9... | RECONFIRM BANK DETAILS FOR PAYMENT.js | js | 1.7 MB | - | 2026-08-05 | - |
| 80bae48ad49efa13... | SOAKAX 260716.JS | js | 2.9 MB | - | 2026-08-05 | - |
| c27a0320a5f2ddf4... | PO 45029.JS | js | 3.4 MB | - | 2026-08-05 | - |
| 0c58015112a8d592... | New Order INVOICE # 2882020.PDF.js | js | 1.0 MB | - | 2026-08-05 | - |
| bf010ff289595d56... | SHIPMENT DOCUMENTS_PDF.exe | exe | 1.1 MB | - | 2026-08-05 | - |
| 79e3baf24631aeea... | Scan00957.exe | exe | 971.5 KB | - | 2026-08-05 | - |
| 6045d659050d22e1... | Purchase Order.JS | js | 2.8 MB | - | 2026-08-05 | - |
| f5767e2000c9e28c... | August 05 2026 files.pdf.vbe | vbe | 64.4 KB | - | 2026-08-05 | - |
| 5cb9e1265f6299f3... | Payment_Confirmation_Receipt.pdf.JS | js | 3.2 MB | - | 2026-08-05 | - |
| 243702bc07e2c666... | Documentos de embarque – BL e PL.JS | js | 2.9 MB | - | 2026-08-05 | - |
| 7c3a7747276ff766... | Swift_Advice_Copy.pdf.JS | js | 2.9 MB | - | 2026-08-05 | - |
| e79f6a350ffe1bd5... | orden de compra.js | js | 1021.3 KB | - | 2026-08-05 | - |
| 98b345d171d2ebf1... | RFQ-1579.JS | js | 2.9 MB | - | 2026-08-05 | - |
| 3780f207b9e25d7f... | Scanned_Almohit TVL & BOOKED MHA1108703312.JS | js | 2.8 MB | - | 2026-08-05 | - |
| a95d05b4e65068bb... | Inquiry-IA04.JS | js | 2.9 MB | - | 2026-08-05 | - |
| 7565970cbfe89501... | Invoice 8000241690_CMA.pdf.JS | js | 2.9 MB | - | 2026-08-05 | - |
| bcc7c08bfe047c32... | 050820260024.JS | js | 2.9 MB | - | 2026-08-05 | - |
| 18fddcf08bcfa108... | PurchaseOrder-37851.js | js | 1.0 MB | - | 2026-08-05 | - |
| 59bb8229fb059a3a... | info_New_Order_7132026 _PDF.shtml(~99 KB).JS | js | 3.2 MB | - | 2026-08-05 | - |
| fe8224fd506c5e1d... | Overdue Invoices.JS | js | 2.9 MB | - | 2026-08-05 | - |
| c2ad7fe539cc9118... | Product specifications and drawings.js | js | 1.0 MB | - | 2026-08-05 | - |
| 7cfde34993d27539... | bank details.js | js | 3.3 MB | - | 2026-08-05 | - |
| 6c4797dbc9ed2c4f... | PO_13381-608861001026.JS | js | 2.8 MB | - | 2026-08-05 | - |
| 8b0c9df448cc639e... | PICTURE DRAWING DESIGN.JS | js | 2.9 MB | - | 2026-08-05 | - |
| 3770855287504905... | SWIFT_COPY PO_2500033&PO 2500054.js | js | 992.8 KB | - | 2026-08-05 | - |
| d6ea3677a8ca991a... | PURCHASE ORDER_CONTRACT AGREEMENT_Doc.JS | js | 3.2 MB | - | 2026-08-05 | - |
| 6cea60db12dcf7de... | 20260804-000581.js | js | 1.1 MB | - | 2026-08-05 | - |
| 4889ae0da3223074... | Perfoma invoice.JS | js | 2.8 MB | - | 2026-08-05 | - |
| af7265bec45dd99e... | RFQ-3194- PI.JS | js | 2.8 MB | - | 2026-08-05 | - |
| 73f5787c702d3cfb... | CV RESUME AND WORK PICTURES.JS | js | 2.9 MB | - | 2026-08-05 | - |
| 3a0c451e4883f5d5... | RFQ 500114681.JS | js | 2.9 MB | - | 2026-08-05 | - |
| f88640c38e15b464... | PO_13381-608861001026.js | js | 1.1 MB | - | 2026-08-05 | - |
| 1ec9722d269c5640... | RFQ # TSL23-5453.JS | js | 2.8 MB | - | 2026-08-05 | - |
| b946be96b26b1da3... | POReportForeign.js | js | 1.0 MB | - | 2026-08-05 | - |
| 1be0f85720768bb5... | RFQ-GN0948.js | js | 1014.6 KB | - | 2026-08-05 | - |
| 7484f5553fb515ce... | Proforma Invoice No. 00124 - CONFIRM.JS | js | 2.9 MB | - | 2026-08-05 | - |
| 172d548ee4c9c3ef... | yierxuhe.JS | js | 2.8 MB | - | 2026-08-05 | - |
| 9c073e29ba0b9a71... | Purchase Order.JS | js | 2.9 MB | - | 2026-08-05 | - |
| 4d08acae81802702... | CUSTOMER STATEMENT of ACCOUNT.exe | exe | 239.5 KB | - | 2026-08-05 | - |
| 8481b4c44ad96ef3... | nDocumentos_de_embarque___BL_e_PL.uue | uue | 1.1 MB | - | 2026-08-04 | - |
| 23b7728772f59a57... | SHIPMENT DOCUMENT TRAKON_Doc.exe | exe | 1.1 MB | - | 2026-08-04 | - |
| 99dc940e1b3ba041... | Architectural_Floor_Plans.JS | js | 2.9 MB | - | 2026-08-04 | - |
| fc3b7db44556473a... | Shipping Documents.JS | js | 3.3 MB | - | 2026-08-04 | - |
| 1bd36214a0021a7f... | ANSE0301_526758504.JS | js | 3.4 MB | - | 2026-08-04 | - |
| 81e61bd60b074241... | Archpre_086544.pdf.js | js | 956.6 KB | - | 2026-08-04 | - |
| bba394138784bd11... | Inter.js | js | 956.6 KB | - | 2026-08-04 | - |
| fdacc773046d8744... | Sevkiyat Belgeleri.....JS | js | 3.2 MB | - | 2026-08-04 | - |
| 1b8ce20074e2a7a3... | MXT028939_DOC.JS | js | 3.3 MB | - | 2026-08-04 | - |
| 92ef61d8b2f0552f... | JSyyyyyyyyyyyyyyyyyyyyyyyyyyy.js | js | 1013.3 KB | - | 2026-08-04 | - |
| fc0c6d519a5a3777... | PO 4502942415.pdf.JS | js | 3.5 MB | - | 2026-08-04 | - |
| f891f74a43809bc1... | Request for Quotation (RFQ) – CIF Offer.JS | js | 3.3 MB | - | 2026-08-04 | - |
| b9d647bfa6a67364... | DE-84864957.JS | js | 3.2 MB | - | 2026-08-04 | - |
| 5cbdf3361da13d73... | info_New_Order_7132026 _PDF.shtml(~99 KB).JS | js | 3.2 MB | - | 2026-08-04 | - |
| f645db24ff8dde58... | info_New_Order_7132026 _PDF.shtml(~99 KB).JS | js | 3.2 MB | - | 2026-08-04 | - |
| f176b24b096bcb92... | Info_New_order_398559.JS | js | 3.2 MB | - | 2026-08-04 | - |
| 5c08270287e5ee97... | Po documents & others.JS | js | 3.2 MB | - | 2026-08-04 | - |
| 14a8b95f9c0d9898... | Letter of Indeminity.JS | js | 3.3 MB | - | 2026-08-04 | - |
| 103be460668280f1... | Sevkiyat Belgeleri....JS | js | 3.2 MB | - | 2026-08-04 | - |
| 0a276b154e9b86c9... | RFQ AUG3 2026.JS | js | 3.2 MB | - | 2026-08-04 | - |
| b721bbe345a775c3... | Proforma Invoice No. 00124 - CONFIRM.JS | js | 3.3 MB | - | 2026-08-04 | - |
| f184acaa8821f13f... | comprobante de pago.js | js | 833.3 KB | - | 2026-08-03 | - |
| 12d2509ef269969c... | AWB SHIPPING DOCUMENTS_pdf.exe | exe | 1.1 MB | - | 2026-08-03 | - |
| 7ccef409f9449f53... | Invoice2203.JS | js | 3.3 MB | - | 2026-08-03 | - |
| e1aa42925255b50c... | OC (Orden de compra N09991212).xml.jse | jse | 74.6 KB | 7/60 | 2026-07-31 | - |
| e962a6eece99739a... | Quotation,pdf.js | js | 787.2 KB | 22/59 | 2026-07-31 | - |
| 243de5e93436d84b... | PO 4513101479.pdf.JS | js | 3.5 MB | 27/61 | 2026-07-30 | - |
| 87ba031182065ab2... | PS-PO0726-8406.js | js | 3.0 KB | 28/60 | 2026-07-30 | - |
| 95f86972335363be... | Lincoln.ps1 | ps1 | 1.5 MB | 11/62 | 2026-07-30 | - |
| 54acf03d875d2775... | OC (Orden de compra N09991212).xml.js | js | 109.9 KB | 20/58 | 2026-07-30 | - |
| a6eb7f69df025bf0... | tmp3A5.tmp.exe | exe | 655.0 KB | 50/70 | 2026-07-30 | - |
| 43e782d8c5b308ec... | Documentos.xml.exe | exe | 372.6 KB | 46/71 | 2026-07-29 | - |
| e9d45ec597fd2f9a... | Orden de compra.pdf.exe | exe | 360.0 KB | 35/69 | 2026-07-29 | - |
| c598ae0dd7ac4978... | Revised_PI.rar | rar | 3.0 KB | 24/55 | 2026-07-29 | - |