It is a delivery mechanism for Grandoreiro , a sophisticated banking Trojan [2, 3].
The ZIP file usually contains an executable (.exe) or a loader disguised as a "task" or "homework" document (as "Tarea" means "Task" in Spanish) [1, 5]. Tarea 962.zip
Once executed, the malware monitors your web browser for banking activity. It can overlay fake windows on top of legitimate banking sites to steal login credentials, two-factor authentication codes, and credit card details [3, 4]. It is a delivery mechanism for Grandoreiro ,