Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1992331722246093BD68781CAF6682B4EF2C6A36BCA534D4577F5870ADFC2D74FC28161 |
|
CONTENT
ssdeep
|
768:UUKi+gcXY9ye8Wv/x20YNrzGNt9Zs+GPmZwbbQNKLpfhCyoxaSrE0Xegmh2fld1Z:AvXYDxOt6 |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
e3553c38f382d5a8 |
|
VISUAL
aHash
|
0200746464600381 |
|
VISUAL
dHash
|
9ec1cdcdcd82db45 |
|
VISUAL
wHash
|
4e00fceefee06381 |
|
VISUAL
colorHash
|
07400018200 |
|
VISUAL
cropResistant
|
9ec1cdcdcd82db45 |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Malicious code is obfuscated using 116 techniques to evade detection by security scanners and make reverse engineering more difficult.