Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T137937331A085AF3B80C746DA8672576632F1435EC72717C8BBF547EA2F8BC64EA23145 |
|
CONTENT
ssdeep
|
1536:UsIxhD+TDNOXGBt2TGYt2TGxQet2GNWt2GNtMhM9j7VDb:U9FaMhM9j7Zb |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
95666a85b61a6ec3 |
|
VISUAL
aHash
|
8240000e7f7f0a01 |
|
VISUAL
dHash
|
0696695ad2d23255 |
|
VISUAL
wHash
|
c3c0000e7f7f1f83 |
|
VISUAL
colorHash
|
06006000000 |
|
VISUAL
cropResistant
|
0696695ad2d23255 |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Malicious code is obfuscated using 74 techniques to evade detection by security scanners and make reverse engineering more difficult.