Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T119029A62EAC6633F27A393CCFBA06FE6A5468209C43444095DF5F2981BB5D0755E383D |
|
CONTENT
ssdeep
|
48:ndhNMvyizmi6QbVKCWF5pwBg6FfHZbPFYrNnxUqFsyhJ04cB653eW1U:nd1izHEXpwHxMnxRFj04Z53f1U |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
9f81611e47e13c3e |
|
VISUAL
aHash
|
3e3f9fbf9f9fff00 |
|
VISUAL
dHash
|
c270304c6c2000b5 |
|
VISUAL
wHash
|
000f8f87979fff00 |
|
VISUAL
colorHash
|
07007000040 |
|
VISUAL
cropResistant
|
c270304c6c2000b5 |
Victim is prompted for 2FA code after entering credentials. The code is intercepted and used by attacker to access victim's account in real-time.
Malicious code is obfuscated using 2 techniques to evade detection by security scanners and make reverse engineering more difficult.