Security researchers at firms like Trellix or Trend Micro frequently analyze these campaigns, noting that they often use "v2.0" or similar versioning to signal updates to their obfuscation or evasion techniques. If you have a specific sample or a source for this file, on a live system; instead, use a sandbox environment for further inspection.
"STHELL.v2.0.zip" is likely a reference to the , a piece of malware often distributed as a ZIP archive. While a specific blog post with that exact file name as its title is not uniquely identified in current research reports, the "STHELL" name is associated with infostealer campaigns.
: Stealing passwords from browsers, FTP clients, and email applications.
: Bypassing multi-factor authentication (MFA) by hijacking active login sessions.
: Gathering details about the victim's hardware and network configuration.