value:  TajMahal has the ability to use the open source libraries XZip/Xunzip and zlib to compress files. ;; Threat Group-3390 has used RAR to compress encrypt and password-protect files prior to exfiltration. ;; The ZLib backdoor compresses communications using the standard Zlib compression library.
name: Archive Collected Data: Archive Via Library