Darellak_collection.zip

If you found this file in your environment and it was not part of a known training exercise, it should be treated as . Action: Isolate the host where the file was downloaded.

A collection of files used to mirror legitimate login pages (like Microsoft 365 or Gmail) to steal credentials. Summary for Security Teams

Checking if the "collection" attempts to add itself to Startup folders or Registry Run keys. 4. Forensic Findings