Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1BEC2C675A0042B3F519383C9B361B72FA2D3838DDB86091252F9476E5BF7E51CE2391A |
|
CONTENT
ssdeep
|
768:LHy5NGUIhNBKugxFQoP7sOy2+y9BH4crIe:wSNBKjXP7sOy2+UBH4crIe |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
bc12c3ed96b829b2 |
|
VISUAL
aHash
|
3e000e8ecff3fffe |
|
VISUAL
dHash
|
e0f43c3c163396d0 |
|
VISUAL
wHash
|
3c00048e83f1fffe |
|
VISUAL
colorHash
|
070010001c0 |
|
VISUAL
cropResistant
|
e0f43c3c163396d0 |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Malicious code is obfuscated using 8 techniques to evade detection by security scanners and make reverse engineering more difficult.