Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1DB141A6417C01A785003C7EFFBD17A50650BC19ECA57E69CF189C2317A92CE9ABD36E8 |
|
CONTENT
ssdeep
|
1536:cilmvDrJWdUMHQ11bb0cyfQTiCuWLAh3gh+SqfE5M0bYsOKQ9KKEKKCKXKWZjkYN:qbo+8krqw |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
fc5c12d26a6ac393 |
|
VISUAL
aHash
|
dc8aff91d9ffcf8f |
|
VISUAL
dHash
|
34341433336c1a18 |
|
VISUAL
wHash
|
1c8082818fff9f8f |
|
VISUAL
colorHash
|
070060000c0 |
|
VISUAL
cropResistant
|
34341433336c1a18 |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Malicious code is obfuscated using 107 techniques to evade detection by security scanners and make reverse engineering more difficult.