KINS modular banking Trojan

Forum for analysis and discussion about malware.
User avatar
Squirl
Posts: 15
Joined: Sun Apr 03, 2011 11:48 pm

Thu Jul 25, 2013 8:39 am

Hi guys,

Does anybody have any Xsums/Samples of KINS?

http://www.darkreading.com/vulnerabilit ... /240158792

Seems this Zeus copycat has been around for a few months, so hopefully somebody has something :)

Squirl
p4r4n0id
Posts: 126
Joined: Thu Sep 22, 2011 11:36 am
Location: Israel
Contact:

Thu Jul 25, 2013 3:52 pm

attached.

p4r4n0id
You do not have the required permissions to view the files attached to this post.
Keep Low. Move Fast. Kill First. Die Last. One Shot. One Kill. No Luck. Pure Skill.
http://p4r4n0id.com/
User avatar
Xylitol
Global Moderator
Posts: 1684
Joined: Sat Apr 10, 2010 5:54 pm
Location: Seireitei, Soul Society
Contact:

Fri Aug 23, 2013 1:08 pm

grum
Posts: 38
Joined: Tue Nov 06, 2012 12:16 pm

Tue Sep 24, 2013 3:55 pm

http://cybercrime-tracker.net/kins.php
KINS tech = powerloader2+zeus mod + spyeye modules ? lolz
pwnd by xylitol lolz http://www.youtube.com/watch?v=NVlqnKPZguw

SRC leaked?
bsteo
Posts: 84
Joined: Fri Nov 16, 2012 5:50 pm

Mon Oct 07, 2013 3:49 pm

Yeah, seems is leaked, SRC sold for $2000 (builder $1000 <- ROFL!)

http://trojanforge.com/showthread.php?t=6554
User avatar
Xylitol
Global Moderator
Posts: 1684
Joined: Sat Apr 10, 2010 5:54 pm
Location: Seireitei, Soul Society
Contact:

Mon Oct 07, 2013 4:17 pm

since i've released the MD5 it was just a question of time..
seem the package got held one week before going on bad hands :|
bsteo
Posts: 84
Joined: Fri Nov 16, 2012 5:50 pm

Mon Oct 07, 2013 7:07 pm

Xylitol wrote:since i've released the MD5 it was just a question of time..
seem the package got held one week before going on bad hands :|
MD5 of what dude? Of the SRC? :D
User avatar
Xylitol
Global Moderator
Posts: 1684
Joined: Sat Apr 10, 2010 5:54 pm
Location: Seireitei, Soul Society
Contact:

Tue Oct 08, 2013 7:42 am

yes, the package.
unixfreaxjp
Posts: 501
Joined: Thu Apr 12, 2012 4:53 pm

Thu Oct 10, 2013 1:14 pm

http://malwaremustdie.blogspot.jp/2013/ ... nload.html
Is it safe/OK to post the archive in here? (Y/N)
[youtube]U-QYKrW-ikI[/youtube]
http://www.youtube.com/watch?v=U-QYKrW-ikI
@Xylit0l @EP_X0FF
I am not sure about this, so I ask you, friends.
Thank's @Xylit0l for the advice.

I was about to delete this..but since there are some KM friends messaging me for it.. OK, I will share the password "in case you maybe need it" to KM members only by private message. I will check 2 times per day, please bear slow response.
Last edited by unixfreaxjp on Thu Oct 10, 2013 2:06 pm, edited 1 time in total.
Post Reply