Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T10663946502445E2D5593C3F1F3A9B73AA269D2D8D73B4A0DE3ED027A1B82C41DE273E4 |
|
CONTENT
ssdeep
|
1536:3g6x4hK3nNaislc68o9TkLYai/4loy9PZILBdmNDX0Tw0EKMn8ByMcDvX8tb3bf5:gEKM8BPcDE1 |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
879e5935c5c63871 |
|
VISUAL
aHash
|
0f0f077773022020 |
|
VISUAL
dHash
|
defecde7c6cec6cc |
|
VISUAL
wHash
|
1f1f0f7777072060 |
|
VISUAL
colorHash
|
31c00010000 |
|
VISUAL
cropResistant
|
2d0d526e2c96d6d5,defecde7c6cec6cc |
Victim enters banking credentials including account numbers and security questions. Attacker gains full access to victim's banking services.
Malicious code is obfuscated using 5 techniques to evade detection by security scanners and make reverse engineering more difficult.
Pages with identical visual appearance (based on perceptual hash)