Historically associated with malware families like Agent Tesla , Remcos RAT , or GuLoader .
: The ZIP file is usually attached to an email disguised as an urgent document (e.g., an invoice, shipping notification, or "important files").
: The user manually extracts the contents. Inside is often a heavily obfuscated .exe , .vbs , or .js file. metamfetamin (filas).zip
This file, , is a known malicious archive typically distributed through phishing campaigns or suspicious downloads. It is designed to deliver malware—often information stealers or remote access trojans (RATs)—to a victim's system. Technical Overview
To steal sensitive data such as browser passwords, cryptocurrency wallet keys, and keystrokes, or to provide attackers with full remote control of the machine. Infection Chain Inside is often a heavily obfuscated
The archive uses a deceptive name to lure specific targets or bypass basic filters. Once extracted, it typically contains executable files or scripts designed to initiate an infection chain. metamfetamin (filas).zip
: Legitimate Windows processes behaving abnormally or consuming high CPU/memory. Recommended Actions Technical Overview To steal sensitive data such as
: If you have not opened the file, delete the ZIP and the email it came from permanently.

支持Android设备
| 供应商 | 型号 |
|---|---|
| 华为 | P20/P20 Pro/P20 RS |
| P30/P30 Pro | |
| P40/P40 Pro/P40 Pro Plus | |
| P50/ P50 Pro/P50 Pro+ | |
| MATE40/40 E/40 Pro/40 Pro+ | |
| Mate 10/10 Pro | |
| Mate 20/20 Pro/20 X | |
| Mate 30/30 Pro | |
| 荣耀 | Note 10 |
| V20 | |
| 30Pro/30Pro+ |
| 供应商 | 型号 |
|---|---|
| 三星 | Galaxy Note 8/9 |
| Galaxy Note 10/10+/10+5G | |
| Galaxy S8/S8+ | |
| Galaxy S9/S9+ | |
| Galaxy S10/S10+/S10e | |
| Galaxy S20/S20+/S20 Ultra | |
| Galaxy Fold | |
| Galaxy A90 5G | |
| Galaxy Tab S4/S5e/S6 | |
| Galaxy S21/S21+/S21 Ultra |