Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1EF143C713318767E59A787F4F45A3325B269830FD22B8C14F3EC96A26BC2C95E527780 |
|
CONTENT
ssdeep
|
3072:s7K51q5X1BCNBIu01B7ycNjTjDmL6yXtb8x:uK51q5ru01BWcNjnYrXtb8x |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
c7807c21bf84e7b4 |
|
VISUAL
aHash
|
4fffff7f64600080 |
|
VISUAL
dHash
|
965f44e8dcc04e40 |
|
VISUAL
wHash
|
4fffff3f24600080 |
|
VISUAL
colorHash
|
30007000000 |
|
VISUAL
cropResistant
|
965f44e8dcc04e40 |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Malicious code is obfuscated using 97 techniques to evade detection by security scanners and make reverse engineering more difficult.