Categories: Trojan

What is “TrojanDropper:Win32/Delf.EB”?

The TrojanDropper:Win32/Delf.EB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDropper:Win32/Delf.EB virus can do?

Reads data out of its own binary image
CAPE extracted potentially suspicious content
Drops a binary and executes it
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Attempts to masquerade or mimic a legitimate process or file name

How to determine TrojanDropper:Win32/Delf.EB?


File Info:
name: 329A60BE36062D8F53C1.mlwpath: /opt/CAPEv2/storage/binaries/240e321d2e2302ebac64d712fb20b02ea603af0ae1d5533f1c22f03e8ea99fffcrc32: 752A99A8md5: 329a60be36062d8f53c1e5a2272150f2sha1: f36e72b710312bf06c6aac6fe2a7d5a33619f868sha256: 240e321d2e2302ebac64d712fb20b02ea603af0ae1d5533f1c22f03e8ea99fffsha512: 38729c47958144c39c372ec9c68f3d4157bf881fad7e1a39330648b9c8c6b705e47645c2ab4334d5a701edb81fff6fd6b15e95dbb73caed87e5e7090ef22d507ssdeep: 24576:2zoQjc0guzehuWFEGV2upi4jr+WpzjcXaf1grCTo2IwXM3MS6TfN0Osjo:ujXdFWFbsujr9cAxTo2mMSpVjotype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T11E95E0136351C672C1390770C9A2D6F563F6BE606F22F61B3AE07D6B39327958AC016Bsha3_384: 28a3391824e77891e15e8dbed09e42ff29b56b219c050ae8c03e479f573f788fd0b8961ffd6e1c647b410efca8806d5dep_bytes: 558bec83c4f0b80c804000e854c4fffftimestamp: 1992-06-19 22:22:17
Version Info:
0: [No Data]

TrojanDropper:Win32/Delf.EB also known as:

Lionic	Trojan.Win32.Ruftar.toxV
Elastic	malicious (high confidence)
DrWeb	Trojan.Packed.19697
MicroWorld-eScan	Gen:Variant.Doina.11516
FireEye	Generic.mg.329a60be36062d8f
Skyhigh	BehavesLike.Win32.Generic.th
ALYac	Gen:Variant.Doina.11516
Malwarebytes	OnlineGames.Spyware.Stealer.DDS
VIPRE	Gen:Variant.Doina.11516
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Gen:Variant.Doina.11516
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.710312
BitDefenderTheta	AI:Packer.41C7794721
VirIT	Trojan.Win32.OLG.AAPQ
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
APEX	Malicious
ClamAV	Win.Trojan.Swisyn-175
Kaspersky	Trojan-PSW.Win32.Ruftar.azpy
Alibaba	TrojanPSW:Win32/Ruftar.7c2d94d7
NANO-Antivirus	Trojan.Win32.OnLineGames.dvkxk
ViRobot	Trojan.Win32.Delf.2981888
Rising	Stealer.OnLineGames!8.131 (TFE:5:BLJtQHqElON)
Emsisoft	Gen:Variant.Doina.11516 (B)
Google	Detected
F-Secure	Dropper.DR/Delphi.Gen5
Zillya	Dropper.Agent.Win32.50038
TrendMicro	TROJ_SASFIS.EN
Trapmine	malicious.moderate.ml.score
Sophos	Mal/Generic-S
SentinelOne	Static AI – Suspicious PE
Jiangmin	TrojanDropper.Agent.xsc
Webroot	W32.Delf.Gen
Varist	W32/Backdoor.XZES-8483
Avira	DR/Delphi.Gen5
Antiy-AVL	Trojan[Dropper]/Win32.Ctulhu
Kingsoft	malware.kb.a.998
Microsoft	TrojanDropper:Win32/Delf.EB
Xcitium	TrojWare.Win32.TrojanDropper.Delf.~KAA@hpb2l
Arcabit	Trojan.Doina.D2CFC
ZoneAlarm	Trojan-PSW.Win32.Ruftar.azpy
GData	Gen:Variant.Doina.11516
Cynet	Malicious (score: 100)
McAfee	Artemis!329A60BE3606
DeepInstinct	MALICIOUS
VBA32	BScope.TrojanPSW.Ruftar
Cylance	unsafe
Panda	Generic Malware
TrendMicro-HouseCall	TROJ_SASFIS.EN
Tencent	Malware.Win32.Gencirc.115dcf35
Ikarus	Trojan-Dropper.Win32.Delf
MaxSecure	Trojan.Malware.975215.susgen
Fortinet	W32/Cossta.OVE!tr
AVG	Win32:Malware-gen
Avast	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_70% (D)