Home > List all groups > List all tools > List all groups using tool logsupport.dll

Threat Group Cards: A Threat Actor Encyclopedia

Names	logsupport.dll
Category	Malware
Type	Backdoor
Description	(Avast) logsupport.dll is primarily used as a backdoor, but uses a different C&C server than the other backdoors. Its corresponding log file is located at %TEMP%\rar%[A-Z0-9]{4}%.tmp. The structure of the log file is also the same. The main difference is that the log file is encrypted by a XOR cipher with a hardcoded key.
Information	<https://decoded.avast.io/luigicamastra/apt-group-planted-backdoors-targeting-high-profile-networks-in-central-asia/>

Last change to this tool card: 18 May 2020

Download this tool card in JSON format

Previous: LogPOS
Next: LoJax

1 group listed (1 APT, 0 other, 0 unknown)

APT groups