Please check this file.
It gives me a headache.
/applications/core/interface/file/attachment.php?id=19801" data-fileExt='zip' data-fileid='19801'>g.rar.zip
Thank you for the sample !
The guys from the LAB will take a look !
File is detected as Packer.Malware.NSAnti.BT.
Best regards.