Danabot

References:

DanaBot - A new banking Trojan surfaces Down Under - 2018-05-31 - Proofpoint - Proofpoint Staff Danabot TA547 CryptXXX

DanaBot control panel revealed - 2019-03-13 - Proofpoint - Dennis Schwarz - Proofpoint Staff Danabot

DanaBot Demands a Ransom Payment - 2019-06-20 - Checkpoint - Yaroslav Harakhavik - Aliaksandr Chailytko Danabot NonRansomware

More Reading:

DanaBot Riding Fake MYOB Invoice Emails - 2018-07-16 - SpiderLabs - Dr. Fahim Abbasi - Diana Lopera Danabot TA547

DanaBot shifts its targeting to Europe, adds new features - 2018-09-21 - Eset - ESET Research Danabot

DanaBot updated with new C&C communication - 2019-02-07 - Eset - ESET Research Danabot

Combing Through Brushaloader Amid Massive Detection Uptick - 2019-02-20 - Talos - Nick Biasini - Edmund Brumaghin - Edmund Brumaghin - Matthew Molyett BrushaLoader Danabot

Does anyone know which ransomware family is this? Was pushed via Danabot botnet id 5 this morning. Delphi executable, internally called "Ghost". - 2019-06-07 - Twitter - Sandor Nemes Danabot Buran

BrushaLoader still sweeping up victims one year later - 2019-07-22 - Proofpoint - Kafeine - Proofpoint Staff BrushaLoader Danabot Gootkit TA544

SystemBC is like Christmas in July for SOCKS5 Malware and Exploit Kits - 2019-08-01 - Proofpoint - Kade Karmon - Kafeine - Dennis Schwarz - Proofpoint Staff SystemBC Fallout RIG Danabot PowerEnum