MAL-2025-192956

---

-= Per source details. Do not edit below this line.=-

Source: kam193 (157ea6b1f1c3d4ed5564c494db770e9156f3e269f12cefec6e4270085a762f26)

During initialization of the archive-support class, the package starts code from another file and downloads multi-stage malware

---

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2025-11-uzip

Reasons (based on the campaign):

• Downloads and executes a remote executable.

• obfuscation

• malware