Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T131E232B280786579034282C5EE15779AE3E38147DF2309F5C5F0D2BAF78EE93E512A58 |
|
CONTENT
ssdeep
|
192:Ctjcs96NXP4jpq/tl8y/2IO/n5NnU/4H0/9CUUIIWaw/VlIv/IMDO/jJPjL/whF9:5qMlZMzIUIIWJl4DWeFp0QvqyqlR+gKh |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
d252b4ad2d29acbc |
|
VISUAL
aHash
|
00040000ffffffff |
|
VISUAL
dHash
|
a4cdc9db33223b0e |
|
VISUAL
wHash
|
00040000fdffffff |
|
VISUAL
colorHash
|
060000001c0 |
|
VISUAL
cropResistant
|
a4cdc9db33223b0e,b86c6eb2a2b6ad99,26a696eea2b2d209,6863818918a4c424,41c080aaa680c4c0,95916346624e4634,b165e6a6c68e9a76 |
Victim is prompted for 2FA code after entering credentials. The code is intercepted and used by attacker to access victim's account in real-time.
Malicious code is obfuscated using 14 techniques to evade detection by security scanners and make reverse engineering more difficult.