Similar samples often contain Remote Access Trojans (RATs) , which allow attackers to gain partial or complete control over an infected system, accessing webcams, keystrokes, and private data.
Malicious archives typically exhibit several suspicious behaviors when detonated in a sandbox environment :
It may modify system registry keys or use the Task Scheduler to ensure the malware runs every time the computer reboots. 4. Mitigation and Defense