Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T13B03852B82403F2F0253924DCA1FE704A3E8444CCF078969A5DAD74939D5F6BD9FA26D |
|
CONTENT
ssdeep
|
384:KDJO48UYUljGlptl13ZP3KkPtZJys76bFd1y9+FR7Ng:2wl7Z/7ZubFi0Re |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
977fa0817928be86 |
|
VISUAL
aHash
|
00808080b8ff7f7f |
|
VISUAL
dHash
|
16666c2a60f8fbcf |
|
VISUAL
wHash
|
02808080beff7f7f |
|
VISUAL
colorHash
|
12000418000 |
|
VISUAL
cropResistant
|
23841030c6b17964,b888b0b2adac9ab8,acad42a8b044b898,306c60fdfbeaed93,0171311919859149,16666c28726cf9ef,c9d5686169717079,5d8d0f69693333b2,56d4f6f2b02a6edc,ed68783e7bf44cb9 |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Malicious code is obfuscated using 85 techniques to evade detection by security scanners and make reverse engineering more difficult.