Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1DF03D7BD3101855B2627838A37A1FA1DE042B31DCF49EC45D1FF221697C5EB29CA4ABD |
|
CONTENT
ssdeep
|
768:4owOSzwOFOiswtbuWf0Oc31oC3bk+UhCAYJfSMfB1:4owOSzwOFYOc3eC3bkgB1 |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
a9dcb56a74c8cd48 |
|
VISUAL
aHash
|
9f073f1f01010303 |
|
VISUAL
dHash
|
377f73b28b4363ce |
|
VISUAL
wHash
|
9f0f3f5b01213b07 |
|
VISUAL
colorHash
|
380060000c0 |
|
VISUAL
cropResistant
|
377f73b28b4363ce |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Malicious code is obfuscated using 125 techniques to evade detection by security scanners and make reverse engineering more difficult.
Drainer supports multiple blockchain networks and checks for high-value tokens on each chain before executing drain operations.