AgentTesla malware
Agent Tesla is a .NET information stealer and keylogger. It harvests browser, mail and FTP credentials and exfiltrates them over SMTP, FTP, HTTP or Telegram, with hard-coded exfiltration settings.
Malva.RE has analysed 73 public samples tagged AgentTesla, statically and without execution. The latest public sample was seen on 2026-10-19.
File types
- PE Executable40
Recurring C2 endpoints
8[.]tcp[.]cpolar[.]top1
Defanged. Extracted statically from the configurations of public samples.
Latest public AgentTesla samples
Analyse your own AgentTesla sample
Malva.RE unpacks, decompiles and extracts the configuration of suspicious files statically — the file is never executed. Free-plan reports are public.
Analyse a file for free