{
  "family": "delf",
  "sample_count": 1727,
  "category": "trojan_generic",
  "description": "Delf is a generic avclass label applied to malware compiled with Delphi or Borland Pascal, covering many different families that happen to share this development toolchain. Delf detections span trojans, backdoors, info-stealers, and droppers; the label identifies the compiler family rather than a specific malware family.",
  "cta": "If you suspect this malware on your system, do not attempt manual removal. Contact SystemHelpdesk expert MSP support at 855-783-7555 for professional incident response guidance.",
  "aliases": [],
  "enrichment_level": "hand-curated",
  "faq": [
    {
      "@type": "Question",
      "name": "What is Delf?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "Delf is a generic avclass label applied to malware compiled with Delphi or Borland Pascal, covering many different families that happen to share this development toolchain. Delf detections span trojans, backdoors, info-stealers, and droppers; the label identifies the compiler family rather than a specific malware family."
      }
    },
    {
      "@type": "Question",
      "name": "How does Delf spread?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "Delf is a generic detection name covering many Delphi-compiled trojans distributed through phishing emails, malicious downloads, and bundled installers."
      }
    },
    {
      "@type": "Question",
      "name": "What are the signs of a Delf infection?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "Generic trojan signs apply: unexpected outbound connections, unsigned Delphi binaries in startup, and antivirus detections referencing Win32/Delf or Trojan.Delf variants."
      }
    },
    {
      "@type": "Question",
      "name": "What should I do if I think I have Delf on my system?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "If you suspect this malware on your system, do not attempt manual removal. Contact SystemHelpdesk expert MSP support at 855-783-7555 for professional incident response guidance."
      }
    }
  ],
  "faq_count": 4,
  "mitre_attack": [],
  "cisa_advisory": null,
  "last_updated": "2026-05-27"
}