Hybrid Analysis of Agent-Tesla: A Prominent Malware as a Service

Adaptation of Information Technology (IT) and Information Communication Technology (ICT) has increased the unsecured internet exposure to cyber-attackers. Cyber criminals are always vigilant and ready for exploiting the opportunities. Attackers always look forward for new techniques and tactics to gain initial access into victim's environment. Getting Initial access into targeted environment is one of the primitive step of cyber-attack. This Paper is covering one of the most prominent and active malware as a service provider, Agent-Tesla. It works as Initial Access Broker and info stealer via vulnerability exploitation and phishing techniques. A detailed study of Technique Tactics and Procedures (TTPs) and Modus Operandi used by Agent Tesla is covered in this research article. Further, malware analysis of Agent Tesla sample, covering static and hybrid analysis adds novelty to this research analysis. Also, proactive measures and precautionary steps to secure the ecosystem from such attack vectors are presented to safeguard the unsecure network.