Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
StealerMalware Family
Active Threat
AgentTesla
High severity
61.4k
IOCs Tracked
2026
First Seen
Oct 26, 2026
Last Seen
0
YARA Rules
Associated IOCs61,413 total · showing 50
Domain1
update.zip2026-10-26High
URL30
https://feed-delta.com/f/qus5n9iecneukfdd5bqagg/8d5wkyb62026-10-21High
http://115.57.245.249:51831/i2026-10-21High
http://210.208.104.156:35164/i2026-10-21High
http://178.74.75.16:3344/bin.sh2026-10-21High
http://123.11.10.206:38595/bin.sh2026-10-21High
http://123.9.244.39:39490/bin.sh2026-10-20High
http://123.14.145.195:46530/bin.sh2026-10-21High
http://42.227.131.223:54082/bin.sh2026-10-21High
http://31.56.52.6/setup.sh2026-10-21High
http://182.116.36.138:57060/bin.sh2026-10-21High
http://185.113.10.26:8080/bot-armv72026-10-21High
http://222.141.40.236:50078/bin.sh2026-10-20High
http://115.55.129.26:59481/bin.sh2026-10-21High
http://64.235.45.196/api.exe2026-10-20High
http://182.117.69.59:36762/bin.sh2026-10-21High
http://153.56.180.69/main_mips2026-10-21High
http://80.78.27.100:8889/opx92026-10-21High
http://115.53.201.33:44073/bin.sh2026-10-20High
http://46.163.181.104:41767/bin.sh2026-10-21High
http://176.65.139.131/bins/kushnet.arm4tl2026-10-21High
MD519
06394646a4d6d959de9420113ea28b362026-09-19High
e6363b8ec386338ce08f159a739f0e972026-10-21High
069a88fe99bed5e1a272d321243a52092026-10-21High
a635c28c24aa6e3e73fad857e33476592026-10-21High
3b93ef948bbb8c3898686adc45233daa2026-10-21High
f0f186887eb534eb7148c9ddd16bab092026-10-21High
155b2e474b4e0a15392d41b4fec166e72026-10-21High
a9574b1b2c720301650bc679937976ac2026-10-20High
aeea254427bccc5e2066d4d864dfaa892026-10-20High
62c46734ad69dfec70c17f041f6ab7d62026-10-20High
689315d0a0a6568d73ed0dd29fb5c0f92026-10-20High
2f8ae5684d99263872c4bceaff0e34762026-10-20High
155553264e98d58b0eaa075b1c3087f62026-10-21High
98f74aa7c6ba29fbb494e869eaa742ae2026-10-20High
c622cbef9251fc82767245967079508b2026-10-20High
374ac744909d297dcf13e9fef12d4c2d2026-10-20High
57d7a6e3086b69098cb93b931d9b34602026-10-20High
748504f2ecd67972a12bb0bf0be57e6b2026-10-20High
c2256df2040bacde643acd4244bb21902026-10-20High
Related Reports9 shown
Case of AgentTesla Malware Distribution Disguised as a Business Proposal Email
AhnLabOct 13, 2026
The Threat of AI-Driven Autonomous Penetration Testing, as Examined by ARTEX
AhnLabOct 14, 2026
LaplasClipper
RexorVc0Sep 4, 2023
Bulletproof Hosting Hunt
Cyber Intelligence InsightsJul 27, 2025
The Spy Within: A Close Encounter with Agent Tesla Malware
Denwp ResearchNov 18, 2023
Unpacking “Cruciferra”: An Analysis of a Sophisticated Crypter Service
Proofpoint Threat InsightJul 20, 2026
Hackers Use Steganographic Loader to Deliver Remcos RAT via Phishing Attachments
Cyber PressJun 22, 2026
Malware Analysis — AgentTesla
0xMrMagneziFeb 15, 2024
LATAM Under Siege: Agent Tesla’s 18-Month Credential Theft Campaign Against Chilean Enterprises
ANY.RUN Cybersecurity BlogMay 14, 2026
Threat Profile
TypeStealer
StatusActive
First SeenSep 12, 2026
Last SeenOct 26, 2026
IOCs tracked61,413