Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1538343247640CD2601EF9AD9AA725E3961F88341C61349CCF6E9C7FADB9BC5CCA73190 |
|
CONTENT
ssdeep
|
768:5TuFDzQ7rrViCSr98EVy22b/LjPULGVwu3Y9BVH2R/jcGfeH9NmUf79o:Uw0kY9n2RwGo9N579o |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
b2d52f909085fd39 |
|
VISUAL
aHash
|
fb8184fe4ec08381 |
|
VISUAL
dHash
|
a255688c98896723 |
|
VISUAL
wHash
|
ff8186fe4ec48381 |
|
VISUAL
colorHash
|
38406000000 |
|
VISUAL
cropResistant
|
a255688c98896723 |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Malicious code is obfuscated using 75 techniques to evade detection by security scanners and make reverse engineering more difficult.