Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T17DA20D6563B3D3E7A15EFED897B073D8B443E75B9B82A7E8145F03DA05E08680C0B642 |
|
CONTENT
ssdeep
|
192:DkaTmF5xkI6ItPc4e44xrHodVT/A0vJ+B+7VNn2dsLqTTg0Z+wNpozWZg8anU:Dk0GGQlcYVT40vYBEn2dsLqY0wzfI |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
8827f212b585f7c9 |
|
VISUAL
aHash
|
07191919191818ff |
|
VISUAL
dHash
|
4df1f3b3b3f1b11d |
|
VISUAL
wHash
|
cf191919191919ff |
|
VISUAL
colorHash
|
30001000180 |
|
VISUAL
cropResistant
|
8e8ecc4e4f4f4f4f,94ec94949c84a485,2f450073d8c2a5a6,00686001c9c9c901,0f430f37372bd606,076b86869616468e,0b47172e26364626,4df3f3b3b3f1b11d |
Victim enters banking credentials including account numbers and security questions. Attacker gains full access to victim's banking services.
Malicious code is obfuscated using 3 techniques to evade detection by security scanners and make reverse engineering more difficult.