Malware Signature
The following table shows a list of malware samples and the corresponding botnet C&C (ip:port) associated with AgentTesla
Database Entry
| Malware: | AgentTesla |
|---|---|
| First seen: | 2017-02-02 02:22:06 UTC |
| Last seen: | 2021-09-12 09:31:35 UTC |
Malware Samples
The table below documents all malware samples associated with this malware family.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2021-09-12 09:31:35 | a8cfc3865dfee4ee96edd5e91cd846cf |  45 / 68 (66.18%)
| AgentTesla | 178.200.180.146:10134 |
| 2021-07-24 06:44:16 | ecc4bce1a88bb738bc5da5f51546e442 | 35 / 69 (50.72%)
| AgentTesla | 193.32.219.170:10134 |
| 2021-07-24 06:44:16 | ecc4bce1a88bb738bc5da5f51546e442 | 35 / 69 (50.72%)
| AgentTesla | 193.32.219.170:10134 |
| 2021-07-12 15:57:14 | 981eb6dbd0a4eb2e33f04b0ffac69944 | 30 / 68 (44.12%)
| AgentTesla | 3.137.146.78:777 |
| 2021-07-12 15:57:14 | 981eb6dbd0a4eb2e33f04b0ffac69944 | 30 / 68 (44.12%)
| AgentTesla | 3.137.146.78:777 |
| 2021-04-23 08:30:00 | 6c733621e781d970c7cc32108a0ab622 | 43 / 69 (62.32%)
| AgentTesla | 18.224.135.48:1612 |
| 2021-04-23 08:30:00 | 6c733621e781d970c7cc32108a0ab622 | 43 / 69 (62.32%)
| AgentTesla | 18.224.135.48:1612 |
| 2021-03-31 05:03:34 | a428c6ab3d79e8d79395db1518d414b0 | 34 / 44 (77.27%)
| AgentTesla | 18.224.135.48:9933 |
| 2021-03-31 05:03:34 | a428c6ab3d79e8d79395db1518d414b0 | 34 / 44 (77.27%)
| AgentTesla | 18.224.135.48:9933 |
| 2021-03-30 00:25:50 | f66bcae24e1df34bcc2f15a24a646635 | 45 / 71 (63.38%)
| AgentTesla | 18.224.135.48:1 |
| 2021-03-30 00:25:50 | f66bcae24e1df34bcc2f15a24a646635 | 45 / 71 (63.38%)
| AgentTesla | 18.224.135.48:1 |
| 2021-03-27 21:23:23 | eb73feb8713fbcc20dd4a6861a4b89ba | n/a | AgentTesla | 193.38.55.33:443 |
| 2021-03-27 21:23:23 | eb73feb8713fbcc20dd4a6861a4b89ba | n/a | AgentTesla | 193.38.55.33:443 |
| 2021-03-25 15:11:44 | eac5db5e09667ff09e44a179d3837364 | 45 / 71 (63.38%)
| AgentTesla | 18.224.135.48:1 |
| 2021-03-25 15:11:44 | eac5db5e09667ff09e44a179d3837364 | 45 / 71 (63.38%)
| AgentTesla | 18.224.135.48:1 |
| 2021-03-25 05:37:01 | 926e451b83fa2370e1baf49f75de7937 | 41 / 69 (59.42%)
| AgentTesla | 193.38.55.33:443 |
| 2021-03-25 05:37:01 | 926e451b83fa2370e1baf49f75de7937 | 41 / 69 (59.42%)
| AgentTesla | 193.38.55.33:443 |
| 2021-03-24 10:42:12 | cc5b4def26c15ad19de9f6ae7028d0e3 | 51 / 69 (73.91%)
| AgentTesla | 18.224.135.48:2008 |
| 2021-03-24 10:42:12 | cc5b4def26c15ad19de9f6ae7028d0e3 | 51 / 69 (73.91%)
| AgentTesla | 18.224.135.48:2008 |
| 2021-03-11 23:29:43 | 897a1239f1ccd07673a2197cd96d1e52 | 52 / 70 (74.29%)
| AgentTesla | 18.224.135.48:1612 |
| 2021-03-11 23:29:43 | 897a1239f1ccd07673a2197cd96d1e52 | 52 / 70 (74.29%)
| AgentTesla | 18.224.135.48:1612 |
| 2021-02-24 10:25:58 | e11349b5c128629768646364a5f1274f | 57 / 71 (80.28%)
| AgentTesla | 3.128.190.178:1222 |
| 2021-02-24 10:25:58 | e11349b5c128629768646364a5f1274f | 57 / 71 (80.28%)
| AgentTesla | 3.128.190.178:1222 |
| 2020-11-11 18:19:45 | fa31c50188c560162f4901f8c168158d | n/a | AgentTesla | 37.120.208.36:49703 |
| 2020-11-11 18:19:45 | fa31c50188c560162f4901f8c168158d | n/a | AgentTesla | 37.120.208.36:49703 |
| 2020-08-04 06:36:36 | 519841636c066a34094691787e5d6a1d | n/a | AgentTesla | 194.5.97.11:27031 |
| 2020-08-04 06:36:36 | 519841636c066a34094691787e5d6a1d | n/a | AgentTesla | 194.5.97.11:27031 |
| 2020-07-16 06:37:08 | 8dc8dd6ff7a50bf1bdcdaeea069a4ae6 | n/a | AgentTesla | 185.140.53.11:9845 |
| 2020-07-16 06:37:08 | 8dc8dd6ff7a50bf1bdcdaeea069a4ae6 | n/a | AgentTesla | 185.140.53.11:9845 |
| 2020-07-09 01:09:00 | 338fc5b0f469b1b2cdc2d1664b7b0eb5 | n/a | AgentTesla | 79.134.225.111:7071 |
| 2020-07-09 01:09:00 | 338fc5b0f469b1b2cdc2d1664b7b0eb5 | n/a | AgentTesla | 79.134.225.111:7071 |
| 2020-03-05 21:16:04 | 5e01bc36aab882405b25f4695a91c0fe | 29 / 73 (39.73%)
| AgentTesla | 185.140.53.60:7071 |
| 2020-03-05 21:16:04 | 5e01bc36aab882405b25f4695a91c0fe | 29 / 73 (39.73%)
| AgentTesla | 185.140.53.60:7071 |
| 2019-10-10 10:35:25 | 2dec6e73433a62c6dc59684783117ff8 | n/a | AgentTesla | 194.5.98.46:32765 |
| 2019-10-10 10:35:25 | 2dec6e73433a62c6dc59684783117ff8 | n/a | AgentTesla | 194.5.98.46:32765 |
| 2019-10-08 07:53:00 | d22cf06370493f2ecc29ab7783d0da54 | 24/70 (34.29%)
| AgentTesla | 194.5.98.46:32765 |
| 2019-10-08 07:53:00 | d22cf06370493f2ecc29ab7783d0da54 | 24/70 (34.29%)
| AgentTesla | 194.5.98.46:32765 |
| 2019-10-05 07:57:16 | d2081e6fcd7b6b4a3d98992e6150faf3 | 35/66 (53.03%)
| AgentTesla | 194.5.98.46:32765 |
| 2019-10-05 07:57:16 | d2081e6fcd7b6b4a3d98992e6150faf3 | 35/66 (53.03%)
| AgentTesla | 194.5.98.46:32765 |
| 2019-10-04 04:25:07 | 17c77107fdf35e095d06e55f35c8d7cd | 28/68 (41.18%)
| AgentTesla | 194.5.98.46:32765 |
| 2019-10-04 04:25:07 | 17c77107fdf35e095d06e55f35c8d7cd | 28/68 (41.18%)
| AgentTesla | 194.5.98.46:32765 |
| 2019-09-27 10:11:37 | 7690413cc14bc8dbf7160d7f33a6a4c7 | 26/69 (37.68%)
| AgentTesla | 194.5.98.46:32765 |
| 2019-09-27 10:11:37 | 7690413cc14bc8dbf7160d7f33a6a4c7 | 26/69 (37.68%)
| AgentTesla | 194.5.98.46:32765 |
| 2019-09-26 08:30:22 | 011e798c905da9094d814b52cd414eea | 33/70 (47.14%)
| AgentTesla | 194.5.98.46:32765 |
| 2019-09-26 08:30:22 | 011e798c905da9094d814b52cd414eea | 33/70 (47.14%)
| AgentTesla | 194.5.98.46:32765 |
| 2019-09-26 05:47:30 | 6439a76ef780ba51f9f99c25d2be2b1a | 38/70 (54.29%)
| AgentTesla | 194.5.98.46:32765 |
| 2019-09-26 05:47:30 | 6439a76ef780ba51f9f99c25d2be2b1a | 38/70 (54.29%)
| AgentTesla | 194.5.98.46:32765 |
| 2019-09-25 08:00:43 | 632c7066d2342c34000d3d42760f30d7 | 34/70 (48.57%)
| AgentTesla | 194.5.98.46:32765 |
| 2019-09-25 08:00:43 | 632c7066d2342c34000d3d42760f30d7 | 34/70 (48.57%)
| AgentTesla | 194.5.98.46:32765 |
| 2019-09-13 11:16:19 | c384a146b46388b0973c7f91f12fa57b | 21 / 70 (30.00%)
| AgentTesla | 79.134.225.72:1819 |
| 2019-09-13 11:16:19 | c384a146b46388b0973c7f91f12fa57b | 21 / 70 (30.00%)
| AgentTesla | 79.134.225.72:1819 |
| 2019-09-05 00:32:10 | 961cc035ed4135d8d0e1c09b23fbda96 | 47/68 (69.12%)
| AgentTesla | 79.134.225.72:1819 |
| 2019-09-05 00:32:10 | 961cc035ed4135d8d0e1c09b23fbda96 | 47/68 (69.12%)
| AgentTesla | 79.134.225.72:1819 |
| 2019-07-17 06:20:04 | a70b7de3d49f7589b8c817aa01029243 | 33/71 (46.48%)
| AgentTesla | 186.138.152.228:449 |
| 2019-07-17 06:20:04 | a70b7de3d49f7589b8c817aa01029243 | 33/71 (46.48%)
| AgentTesla | 186.138.152.228:449 |
| 2019-07-13 17:27:23 | ec7b602a1961d3f1adff2b33388edd51 | 28/70 (40.00%)
| AgentTesla | 190.13.160.19:449 |
| 2019-07-13 17:27:23 | ec7b602a1961d3f1adff2b33388edd51 | 28/70 (40.00%)
| AgentTesla | 190.13.160.19:449 |
| 2018-12-02 10:41:31 | 1b2e5d5c7c9acebad10ec8c042eb6698 | n/a | AgentTesla | 46.105.131.72:443 |
| 2018-12-02 10:41:31 | 1b2e5d5c7c9acebad10ec8c042eb6698 | n/a | AgentTesla | 46.105.131.72:443 |
| 2018-12-02 00:30:41 | d2b2ec08f88ebebb0543e2e5497985f3 | n/a | AgentTesla | 46.105.131.72:443 |
| 2018-12-02 00:30:41 | d2b2ec08f88ebebb0543e2e5497985f3 | n/a | AgentTesla | 46.105.131.72:443 |
| 2018-11-27 16:08:07 | 0fa497c1a3603a4b629c26afb1e89869 | n/a | AgentTesla | 83.166.247.211:443 |
| 2018-11-27 16:08:07 | 0fa497c1a3603a4b629c26afb1e89869 | n/a | AgentTesla | 185.244.150.230:443 |
| 2018-11-27 16:08:07 | 0fa497c1a3603a4b629c26afb1e89869 | n/a | AgentTesla | 172.106.33.46:443 |
| 2018-11-27 16:08:07 | 0fa497c1a3603a4b629c26afb1e89869 | n/a | AgentTesla | 83.166.247.211:443 |
| 2018-11-27 16:08:07 | 0fa497c1a3603a4b629c26afb1e89869 | n/a | AgentTesla | 185.244.150.230:443 |
| 2018-11-27 16:08:07 | 0fa497c1a3603a4b629c26afb1e89869 | n/a | AgentTesla | 172.106.33.46:443 |
| 2018-11-19 09:08:17 | bd98f827d9ed54d1cdd6e3f29f4263c5 | 40/70 (57.14%)
| AgentTesla | 83.166.247.211:443 |
| 2018-11-19 09:08:17 | bd98f827d9ed54d1cdd6e3f29f4263c5 | 40/70 (57.14%)
| AgentTesla | 83.166.247.211:443 |
| 2018-11-18 18:44:22 | 1118a459712d48627a43bd6171fd725b | n/a | AgentTesla | 83.166.247.211:443 |
| 2018-11-18 18:44:22 | 1118a459712d48627a43bd6171fd725b | n/a | AgentTesla | 83.166.247.211:443 |
| 2018-11-07 18:21:22 | 006f9afe8f7d391c55679e1837af9c34 | 43/65 (66.15%)
| AgentTesla | 46.105.131.72:443 |
| 2018-11-07 18:21:22 | 006f9afe8f7d391c55679e1837af9c34 | 43/65 (66.15%)
| AgentTesla | 46.105.131.72:443 |
| 2018-10-23 20:48:46 | 0aaf0e876b3ecf638084a07d40ee8a78 | 39/68 (57.35%)
| AgentTesla | 46.105.131.72:443 |
| 2018-10-23 20:48:46 | 0aaf0e876b3ecf638084a07d40ee8a78 | 39/68 (57.35%)
| AgentTesla | 46.105.131.72:443 |
| 2018-10-21 05:21:49 | 175c7553e234be23ab4d12d2b80d7653 | n/a | AgentTesla | 46.105.131.72:443 |
| 2018-10-21 05:21:49 | 175c7553e234be23ab4d12d2b80d7653 | n/a | AgentTesla | 46.105.131.72:443 |
| 2018-10-19 04:47:49 | 16f8c5563982b97116f73273e22cfc9b | n/a | AgentTesla | 46.105.131.72:443 |
| 2018-10-19 04:47:49 | 16f8c5563982b97116f73273e22cfc9b | n/a | AgentTesla | 46.105.131.72:443 |
| 2018-10-09 17:48:32 | 00db0660cb65cccc12dc3a3c36ea5396 | 38/68 (55.88%)
| AgentTesla | 46.105.131.72:443 |
| 2018-10-09 17:48:32 | 00db0660cb65cccc12dc3a3c36ea5396 | 38/68 (55.88%)
| AgentTesla | 46.105.131.72:443 |
| 2018-08-06 14:19:47 | 54ba7cb236593c52e4d700039776678b | 24/61 (39.34%)
| AgentTesla | 94.142.138.211:443 |
| 2018-08-06 14:19:47 | 54ba7cb236593c52e4d700039776678b | 24/61 (39.34%)
| AgentTesla | 94.142.138.211:443 |
| 2018-05-15 06:31:57 | 7d51dc81204cf5baea91304d8cf20c16 | 27/66 (40.91%)
| AgentTesla | 185.174.175.14:443 |
| 2018-05-15 06:31:57 | 7d51dc81204cf5baea91304d8cf20c16 | 27/66 (40.91%)
| AgentTesla | 185.174.175.14:443 |
| 2017-03-17 13:45:29 | 18ea0fd6924c6a9f0dd94b060722aeb6 | 32/62 (51.61%)
| AgentTesla | 52.38.159.164:443 |
| 2017-03-17 13:45:29 | 18ea0fd6924c6a9f0dd94b060722aeb6 | 32/62 (51.61%)
| AgentTesla | 35.187.46.239:443 |
| 2017-03-17 13:45:29 | 18ea0fd6924c6a9f0dd94b060722aeb6 | 32/62 (51.61%)
| AgentTesla | 52.38.159.164:443 |
| 2017-03-17 13:45:29 | 18ea0fd6924c6a9f0dd94b060722aeb6 | 32/62 (51.61%)
| AgentTesla | 35.187.46.239:443 |
| 2017-02-02 02:22:06 | 61cccc6aa57d6e55ece30be80f7afb97 | n/a | AgentTesla | 52.33.54.94:443 |
| 2017-02-02 02:22:06 | 61cccc6aa57d6e55ece30be80f7afb97 | n/a | AgentTesla | 52.33.54.94:443 |