logsupport.dll

Description

(Avast) logsupport.dll is primarily used as a backdoor, but uses a different C&C server than the other backdoors. Its corresponding log file is located at %TEMP%\rar%[A-Z0-9]{4}%.tmp. The structure of the log file is also the same. The main difference is that the log file is encrypted by a XOR cipher with a hardcoded key.

Names

Name
logsupport.dll

Category

Malware

Type

  • Backdoor

Information

Other Information

Uuid

4f8de0d8-abe2-432e-9d7c-9a629dfc9972

Last Card Change

2020-05-18