The ".zip" extension in the identifier suggests a compressed archive, which is a common delivery method for malware.
The prefix "GF_3vd" does not match standard malware naming conventions from major security firms like CISA or Check Point Research . It may be a: GF_3vd_luciferzip
: It combines cryptojacking (mining Monero cryptocurrency using the host's resources) with DDoS (Distributed Denial of Service) capabilities. GF_3vd_luciferzip
If you have encountered a file with this name, security experts from Microsoft and Malwarebytes recommend the following: GF_3vd_luciferzip