Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T119245DF22264677F499B87CBFA296604F39F51AFE40A0CD093DDDBA59683C80F527850 |
|
CONTENT
ssdeep
|
6144:gxvZN1k04eWRo9gZfI6frAflAfZSf9OfNd+7/w/+yknYrXtbfO:gxvZN1k04eWRo9gZfI6frAflAfZSf9OC |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
9c6cb732a54e9c1a |
|
VISUAL
aHash
|
02181818243e2cff |
|
VISUAL
dHash
|
84b33233ccccc8cc |
|
VISUAL
wHash
|
421818183c7e7eff |
|
VISUAL
colorHash
|
38007200000 |
|
VISUAL
cropResistant
|
84b33233ccccc8cc |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Malicious code is obfuscated using 115 techniques to evade detection by security scanners and make reverse engineering more difficult.
Drainer supports multiple blockchain networks and checks for high-value tokens on each chain before executing drain operations.