bd17fd6f56a0551f25fae747f4c6ed91d81c6c6f5bf272d54d33d2a87dd1a0c8
- SHA256 bd17fd6f56a0551f25fae747f4c6ed91d81c6c6f5bf272d54d33d2a87dd1a0c8
Overview
overview
10Static
static
3LinenMark/...ll.dll
windows10-2004-x64
3LinenMark/...ll.dll
windows11-ltsc_2024-x64
3LinenMark/...pt.dll
windows10-2004-x64
3LinenMark/...pt.dll
windows11-ltsc_2024-x64
3LinenMark/...rk.exe
windows10-2004-x64
10LinenMark/...rk.exe
windows11-ltsc_2024-x64
10LinenMark/...ll.dll
windows10-2004-x64
3LinenMark/...ll.dll
windows11-ltsc_2024-x64
3LinenMark/libcurl.dll
windows10-2004-x64
3LinenMark/libcurl.dll
windows11-ltsc_2024-x64
3LinenMark/...32.dll
windows10-2004-x64
3LinenMark/...32.dll
windows11-ltsc_2024-x64
3LinenMark/...32.dll
windows10-2004-x64
3LinenMark/...32.dll
windows11-ltsc_2024-x64
3Static task
static1
Behavioral task
behavioral1
Sample
LinenMark/AuthShell.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
LinenMark/AuthShell.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
LinenMark/HFEncrypt.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
LinenMark/HFEncrypt.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
LinenMark/LinenMark.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
LinenMark/LinenMark.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
LinenMark/RobinRoundDnsDll.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
LinenMark/RobinRoundDnsDll.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
LinenMark/libcurl.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
LinenMark/libcurl.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
LinenMark/libeay32.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
LinenMark/libeay32.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
LinenMark/ssleay32.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
LinenMark/ssleay32.dll
Resource
win11ltsc2024-20260911-en
File was codesigned using an insecure algorithm.
| resource |
|---|
| unpack001/LinenMark/HFEncrypt.dll |
| unpack001/LinenMark/LinenMark.exe |
| unpack001/LinenMark/RobinRoundDnsDll.dll |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/LinenMark/AuthShell.dll |
Unsigned PE
Checks for missing Authenticode signature.
count=10, id=259, version=27412,
count=136, id=261, version=27412,
count=18, id=260, version=27412,
count=29, id=261, version=30034,
count=16, id=260, version=30034,
count=18, id=259, version=30034,
count=7, id=257, version=27412,
count=112, id=1, productName=Unmarked objects,
count=4, id=261, version=30159,
count=1, id=256, version=30159,
count=1, id=255, version=30159,
count=1, id=258, version=30159,
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Aug 11, 2021
CN=上海青蔓网络科技有限公司,O=上海青蔓网络科技有限公司,ST=上海市,C=CN
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=7, id=109, productName=VS2005 build 50727, version=50727,
count=21, id=123, productName=VS2005 build 50727, version=50727,
count=510, id=1, productName=Unmarked objects,
count=35, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=180, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=137, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=132, productName=VS2008 build 21022, version=21022,
count=40, id=138, version=30729,
count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Apr 27, 2022
CN=上海青蔓网络科技有限公司,O=上海青蔓网络科技有限公司,ST=上海市,C=CN
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=13, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=40, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=43, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=195, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=377, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=3, id=156, productName=VS2010 SP1 build 40219, version=40219,
count=802, id=1, productName=Unmarked objects,
count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=175, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Aug 11, 2021
CN=上海青蔓网络科技有限公司,O=上海青蔓网络科技有限公司,ST=上海市,C=CN
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=32, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=20, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=110, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=7, id=123, productName=VS2005 build 50727, version=50727,
count=99, id=1, productName=Unmarked objects,
count=3, id=138, version=30729,
count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
Nov 6, 2018
SERIALNUMBER=91440300746612636Q,CN=ShenZhen Thunder Networking Technologies Ltd.,OU=IT,O=ShenZhen Thunder Networking Technologies Ltd.,L=Shenzhen,ST=Guangdong,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13085368656e5a68656e,1.3.6.1.4.1.311.60.2.1.2=#13084775616e446f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Nov 6, 2018
SERIALNUMBER=91440300746612636Q,CN=ShenZhen Thunder Networking Technologies Ltd.,OU=IT,O=ShenZhen Thunder Networking Technologies Ltd.,L=Shenzhen,ST=Guangdong,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13085368656e5a68656e,1.3.6.1.4.1.311.60.2.1.2=#13084775616e446f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
count=12, id=241, version=40116,
count=163, id=243, version=40116,
count=25, id=242, version=40116,
count=6, id=199, version=41118,
count=23, id=259, version=24123,
count=22, id=261, version=24123,
count=16, id=260, version=24123,
count=4, id=257, productName=VS2015 UPD3.1 build 24215, version=24215,
count=7, id=203, version=65501,
count=336, id=1, productName=Unmarked objects,
count=134, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Nov 8, 2018
SERIALNUMBER=91440300746612636Q,CN=ShenZhen Thunder Networking Technologies Ltd.,OU=IT,O=ShenZhen Thunder Networking Technologies Ltd.,L=Shenzhen,ST=Guangdong,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13085368656e5a68656e,1.3.6.1.4.1.311.60.2.1.2=#13084775616e446f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Nov 8, 2018
SERIALNUMBER=91440300746612636Q,CN=ShenZhen Thunder Networking Technologies Ltd.,OU=IT,O=ShenZhen Thunder Networking Technologies Ltd.,L=Shenzhen,ST=Guangdong,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13085368656e5a68656e,1.3.6.1.4.1.311.60.2.1.2=#13084775616e446f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
count=12, id=259, version=23917,
count=169, id=261, version=23917,
count=25, id=260, version=23917,
count=23, id=259, version=24123,
count=21, id=261, version=24123,
count=17, id=260, version=24123,
count=11, id=257, version=23917,
count=146, id=1, productName=Unmarked objects,
count=21, productName=Unmarked objects (old),
count=575, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Nov 8, 2018
SERIALNUMBER=91440300746612636Q,CN=ShenZhen Thunder Networking Technologies Ltd.,OU=IT,O=ShenZhen Thunder Networking Technologies Ltd.,L=Shenzhen,ST=Guangdong,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13085368656e5a68656e,1.3.6.1.4.1.311.60.2.1.2=#13084775616e446f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Nov 8, 2018
SERIALNUMBER=91440300746612636Q,CN=ShenZhen Thunder Networking Technologies Ltd.,OU=IT,O=ShenZhen Thunder Networking Technologies Ltd.,L=Shenzhen,ST=Guangdong,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13085368656e5a68656e,1.3.6.1.4.1.311.60.2.1.2=#13084775616e446f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
count=11, id=259, version=23917,
count=119, id=261, version=23917,
count=24, id=260, version=23917,
count=2, id=257, version=23917,
count=18, id=259, version=24123,
count=22, id=261, version=24123,
count=15, id=260, version=24123,
count=3, id=257, productName=VS2015 UPD3.1 build 24215, version=24215,
count=456, id=1, productName=Unmarked objects,
count=50, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,