Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1809266626062397B029387E6D296B70F72F28058F7570AD153FC839C1BDBE94FD2614A |
|
CONTENT
ssdeep
|
384:qDc26Bx6M8NGhnMUyzJpaDlsVXNilf/9P8kkF/W:qD+B8HNPJJSlQdix/9PFkdW |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
c3e13c3c9c64c793 |
|
VISUAL
aHash
|
466c6e606e0c0018 |
|
VISUAL
dHash
|
94dac8c8d8d88532 |
|
VISUAL
wHash
|
e7ef6e6c6e001c18 |
|
VISUAL
colorHash
|
38002c00000 |
|
VISUAL
cropResistant
|
94dac8c8d8d88532 |
Victim enters banking credentials including account numbers and security questions. Attacker gains full access to victim's banking services.
Malicious code is obfuscated using 2 techniques to evade detection by security scanners and make reverse engineering more difficult.