IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure
TLP:WHITE2 IOCs

Case of AgentTesla Malware Distribution Disguised as a Business Proposal Email

AH
AhnLab
Published October 13, 2026Original Report

Threat Actors

Malware Families

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYPlayINFRASTRUCTUREunknownCAPABILITYAgentTeslaMETA StealerPlayVICTIMunknown
Adversary(1)
Infrastructure
Capability(3)
Victim

Indicators of Compromise

Indicators of Compromise2

TypeIndicatorConfidenceScoreFirst Seen
MD5cbcc4ba1a1485cb01a4b65fc7915e629
file-hashintel-blogmalware
Medium
53
Oct 14, 26
MD58777a9b0533660fddc2a73b819638c18
file-hashintel-blogmalware
High
85
Sep 15, 26

IOC Relationship Graph

IOC Relationship Graph2 total IOCs
MD5
MD52Actors1Malware3REPORTCase of AgentTesla MalwarePlayAgentTeslaMETA StealerPlay
scroll to zoom · drag to pan · click IOC to open