Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T15E8311016085EE3F1167C7F2F2A6EB26903CE38AE12B5429EDFC57D50B59C72C21B15A |
|
CONTENT
ssdeep
|
768:QvEmsxRP0w5mRS1B9GO4enNou9xCuJBgZarplLh4wLdyWq0nXdGReVP:QsmsxRP0emRS194eiuJ5h4wLdyVq |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
e4c1199ea7231fa9 |
|
VISUAL
aHash
|
ffff61e3f3100000 |
|
VISUAL
dHash
|
d494c7c6a624a240 |
|
VISUAL
wHash
|
ffffe1e3f3100000 |
|
VISUAL
colorHash
|
0ae00000000 |
|
VISUAL
cropResistant
|
d494c7c6a624a240 |
Victim enters banking credentials including account numbers and security questions. Attacker gains full access to victim's banking services.
Malicious code is obfuscated using 5 techniques to evade detection by security scanners and make reverse engineering more difficult.