This malware drops the malicious payload as a zip file that is stored in its body. Using this method for obfuscating the code distracts the unaware website owner thus making the malware lifespan longer.
There could be any other type of malware in this archive such as backdoor, hacktool or a spam content. The archive is extracted using attached zip routines and can be used by attacker for further actions.
Severity
HIGH