Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 13:17:08 UTC
Home > List all groups > List all tools > List all groups using tool logsupport.dll
 Tool: logsupport.dll
Names logsupport.dll
Category Malware
Type Backdoor
Description
(Avast) logsupport.dll is primarily used as a backdoor, but uses a different C&C server than the
other backdoors. Its corresponding log file is located at %TEMP%\rar%[A-Z0-9]{4}%.tmp.
The structure of the log file is also the same. The main difference is that the log file is
encrypted by a XOR cipher with a hardcoded key.
Information
Last change to this tool card: 18 May 2020
Download this tool card in JSON format
All groups using tool logsupport.dll
Changed Name Country Observed
APT groups
 Mikroceen 2017-Mar 2021
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=4f8de0d8-abe2-432e-9d7c-9a629dfc9972
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=4f8de0d8-abe2-432e-9d7c-9a629dfc9972
Page 1 of 1