DOWNLOAD BLOCKED BY ENDPOINT SECURITY
Threat prevented
The endpoint detection and response (EDR) agent blocked the scholarship form before execution.
Detection Details
| Field | Observation |
|---|---|
| File | CHED_Scholarship_Application_2026.docm |
| Detection | ScholarCrypt.RansomSim — fictional ransomware variant for this exercise |
| Severity | Critical |
| Disposition | Blocked / Quarantined (simulated) |
| Behavior | Attempted document-triggered process execution followed by ransomware-like file encryption behavior. |
| Secondary behavior | Attempted access to an existing social-media session and automated sharing of the scholarship link to Facebook Messenger contacts. |
| Network indicator | updates-scholarship.example (simulated C2 indicator) |
Analyst note: No ransomware, encryption, Facebook access, credential theft, or message transmission occurs in this training application. These are static scenario observations only.
Return to Download Page