Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1A862647180807E3B81E3C3D6A661577FA1C2C28AD987470663FE8B5E1BC5EE4ED14989 |
|
CONTENT
ssdeep
|
192:7Lf48VWWyXMJe4tS1xWnTj1uoH448pQCXjdCrvCTiW++vKIeRliyRgPn0L9:oC448medCyi2URliyos9 |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
c3ac38d1c6c36d9a |
|
VISUAL
aHash
|
0000617c7e606000 |
|
VISUAL
dHash
|
d23bc3c8c8c0c020 |
|
VISUAL
wHash
|
7f03737e7e746000 |
|
VISUAL
colorHash
|
38000000e00 |
|
VISUAL
cropResistant
|
d23bc3c8c8c0c020 |
Victim is prompted for 2FA code after entering credentials. The code is intercepted and used by attacker to access victim's account in real-time.
Malicious code is obfuscated using 2 techniques to evade detection by security scanners and make reverse engineering more difficult.