What is the password to the archive? I can take a look at it in a VM
haven't gotten into the archive, but the password into the file was "TBm123"
it is down already but I suspect it would have been either the redline stealer or the lumma stealer
ahhh, okay. thank you so much!