logsupport.dll
Description
(Avast) logsupport.dll is primarily used as a backdoor, but uses a different C&C server than the other backdoors. Its corresponding log file is located at %TEMP%\rar%[A-Z0-9]{4}%.tmp. The structure of the log file is also the same. The main difference is that the log file is encrypted by a XOR cipher with a hardcoded key.
Names
Name |
---|
logsupport.dll |
Category
Malware
Type
- Backdoor
Information
Other Information
Uuid
4f8de0d8-abe2-432e-9d7c-9a629dfc9972
Last Card Change
2020-05-18