Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T160B26431C653AE2B00A381E59EB8571E73C5528ADB170B0513F5C36EABCFE89DD016A6 |
|
CONTENT
ssdeep
|
384:5+cilo4X3Js16sU2UiD1iDMsUWUiDhiDgsU2UiD1iDYt8e52wOn8AfLf94f6t:GfY6sl/wAsp/cUsl/wct8GkLL9k6t |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
c063553e283f2f2b |
|
VISUAL
aHash
|
007c7454545c5c7e |
|
VISUAL
dHash
|
c584c4a5b5b4dc94 |
|
VISUAL
wHash
|
007c765654547e7e |
|
VISUAL
colorHash
|
38000600018 |
|
VISUAL
cropResistant
|
c584c4a5b5b4dc94 |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Malicious code is obfuscated using 46 techniques to evade detection by security scanners and make reverse engineering more difficult.