Categories: Trojan

Win32/TrojanDownloader.Delf.CXL malicious file

The Win32/TrojanDownloader.Delf.CXL is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/TrojanDownloader.Delf.CXL virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
CAPE extracted potentially suspicious content
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Attempts to modify proxy settings
Touches a file containing cookies, possibly for information gathering

How to determine Win32/TrojanDownloader.Delf.CXL?


File Info:
name: C4FC6C56FE4BD650A52F.mlwpath: /opt/CAPEv2/storage/binaries/d9b78c7d5959dfbcbc4726af151442a77caac08fe511223b42dc06cf31514035crc32: 36332855md5: c4fc6c56fe4bd650a52fabc849724592sha1: eee36bbb787f3b59faffe2011579526abbefde2fsha256: d9b78c7d5959dfbcbc4726af151442a77caac08fe511223b42dc06cf31514035sha512: ab69a313c5e16891083a2b73a254ee0fdc1dad2004a74e13cb9c815a394b20b3297dfdc64fbb46b4038416b592e77e0f5d45753a9a66d41b48800f12d976c304ssdeep: 12288:S0deWBjSlSJNiPpcA3uh+hpl5sy0RTjwCtoBSiyp:SceASlSfaG2STRTjhtyfyptype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1E6E4AF62F1D14176E1271A789C2F5B69693ABF613E24784A6FE43C480F3B7C1382E197sha3_384: 3d5bfddf6a806f238f2f7d6928d96d01905a4fa583e1da10fef7f987982db4837eb95cee9d3e1e47b528bb89ecdda422ep_bytes: 558bec83c4f0b894b84600e86ca6f9fftimestamp: 1992-06-19 22:22:17
Version Info:
0: [No Data]

Win32/TrojanDownloader.Delf.CXL also known as:

Bkav	W32.KhalesiLFT.Trojan
Lionic	Trojan.Win32.Remcos.m!c
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader33.36652
MicroWorld-eScan	Trojan.GenericKDZ.67152
FireEye	Generic.mg.c4fc6c56fe4bd650
McAfee	GenericRXKR-FL!C4FC6C56FE4B
Malwarebytes	Delphi.Trojan.Downloader.DDS
Zillya	Trojan.GenKryptik.Win32.48526
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 00566ae11 )
Alibaba	Backdoor:Win32/Remcos.d97e9440
K7GW	Trojan ( 00566ae11 )
Cybereason	malicious.6fe4bd
BitDefenderTheta	Gen:NN.ZelphiCO.36348.PGX@aqu8bini
VirIT	Trojan.Win32.Kryptik.CEP
Cyren	W32/Trojan.XRKN-2767
Symantec	Trojan.Gen.2
ESET-NOD32	Win32/TrojanDownloader.Delf.CXL
Zoner	Trojan.Win32.92203
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Backdoor.Win32.Remcos.gen
BitDefender	Trojan.GenericKDZ.67152
NANO-Antivirus	Trojan.Win32.GenKryptik.hkjqlx
Avast	Win32:Trojan-gen
Tencent	Malware.Win32.Gencirc.115b6fef
Emsisoft	Trojan.GenericKDZ.67152 (B)
F-Secure	Heuristic.HEUR/AGEN.1331285
VIPRE	Trojan.GenericKDZ.67152
McAfee-GW-Edition	GenericRXKR-FL!C4FC6C56FE4B
Sophos	Troj/AutoG-HW
SentinelOne	Static AI – Suspicious PE
GData	Trojan.GenericKDZ.67152
Jiangmin	Backdoor.Remcos.bqz
Avira	HEUR/AGEN.1331285
Antiy-AVL	Trojan[Backdoor]/Win32.Remcos
Xcitium	Malware@#hg8xq9nlq2fm
Arcabit	Trojan.Generic.D10650
ZoneAlarm	HEUR:Backdoor.Win32.Remcos.gen
Microsoft	Trojan:Win32/Occamy.AA
Google	Detected
AhnLab-V3	Trojan/Win32.Remcos.R336485
Acronis	suspicious
VBA32	BScope.TrojanDropper.Agent
ALYac	Trojan.GenericKDZ.67152
MAX	malware (ai score=88)
Cylance	unsafe
Panda	Trj/GdSda.A
Rising	Malware.FakeXLS/ICON!1.9C3D (CLASSIC)
Yandex	Trojan.DL.Delf!LvqDXJD3hBQ
Ikarus	Trojan.Inject
MaxSecure	Trojan.Malware.9833444.susgen
Fortinet	W32/Kryptik.HLTD!tr
AVG	Win32:Trojan-gen
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)