Sandor Nemes

 @sandornemes

Does anyone know which ransomware family is this? Was pushed via Danabot botnet id 5 this morning. Delphi executable, internally called "Ghost". - 2019-06-07 - Twitter - Sandor Nemes Danabot Buran