Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1C5332AF193A031B4C11BCBE6F973AA3533AB20F8B71A459056F99B745256BDCDE0A4C0 |
|
CONTENT
ssdeep
|
768:5dlt4adHxT+QQL2Xrg52xX7pZWWKTdHRFaFewYTo:5zdH2L27g52V7pZWJJHRFaYwYTo |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
ec649393936d6c89 |
|
VISUAL
aHash
|
67e7d3d3ffdfcff7 |
|
VISUAL
dHash
|
cc4c96966016184c |
|
VISUAL
wHash
|
42e6c0c0ffc3c7c3 |
|
VISUAL
colorHash
|
07007000000 |
|
VISUAL
cropResistant
|
cc4c96966016184c |
Victim is prompted for 2FA code after entering credentials. The code is intercepted and used by attacker to access victim's account in real-time.
Malicious code is obfuscated using 20753 techniques to evade detection by security scanners and make reverse engineering more difficult.
Drainer supports multiple blockchain networks and checks for high-value tokens on each chain before executing drain operations.