Classification: Malicious
BPA.Transport.dll is a trojan (Windows 64-bit executable, 238.0 KB). Flagged by 74% of antivirus engines (71 detections). Linked to Lightneuron malware.
Detection summary
- 71 antivirus detections (74% detection ratio)
- 0 IDS alerts
- 12 processes observed
- 0 contacted hosts
- 0 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Generic Malware |
Hybrid-Analysis |
2023-01-30 11:15:04 |
2023-01-30 11:15:04 |
|
|
| HEUR:Trojan.LightNeuron |
Hybrid-Analysis |
2019-01-29 18:15:08 |
2019-01-29 18:15:08 |
|
S0395 LightNeuron
|
Sample information
- Filenames
- BPA.Transport.dll
- File type
- PE32+ executable (DLL) (GUI) x86-64, for MS Windows
- Size
- 243712 bytes
- MD5
5924eac8af1f3e3f1f825998bc59c062- SHA-1
0a9f10925af42df94925d07112f303d57392c908- SHA-256
88c90c2b123a357423ab3241624cba49d57122ee3b8ff4130504090c174bb09d- First indexed
- 2019-01-29 18:15:08
- Last updated
- 2026-09-10 07:32:28
Antivirus detections
| Engine | Detection |
|---|
| ALYac | Backdoor.Turla.A |
| AVG | Win32:Turla-AR [Trj] |
| AhnLab-V3 | Trojan/Win32.Agent.C2985661 |
| Alibaba | Trojan:Win32/LightNeuron.5e26919a |
| Antiy-AVL | Trojan[APT]/Win64.Turla |
| Arcabit | Trojan.Agent.LightNeuron.B |
| Avast | Win32:Turla-AR [Trj] |
| Avira | TR/Redcap.igtrt |
| BitDefender | Trojan.Agent.LightNeuron.B |
| Bkav | W32.Common.F503270D |
| CAT-QuickHeal | Trojan.Ghanarava.173289577659c062 |
| CTX | dll.trojan.lightneuron |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.Neuron.2 |
| ESET-NOD32 | a variant of Win64/Turla.CC |
| Elastic | malicious (high confidence) |
| Emsisoft | Trojan.Agent.LightNeuron.B (B) |
| F-Secure | Trojan.TR/Redcap.igtrt |
| Fortinet | W32/LightNeuron!tr |
| GData | Trojan.Agent.LightNeuron.B |
| Google | Detected |
| Ikarus | Trojan.Win64.Turla |
| Jiangmin | Trojan.LightNeuron.a |
| K7AntiVirus | Trojan ( 00546eb41 ) |
| K7GW | Trojan ( 00546eb41 ) |
| Kaspersky | HEUR:Trojan.Win32.LightNeuron.gen |
| Kingsoft | malware.kb.a.737 |
| Lionic | Trojan.Win32.LightNeuron.4!c |
| Malwarebytes | Malware.AI.4117425639 |
| MaxSecure | Trojan.Malware.74152584.susgen |
| McAfeeD | ti!88C90C2B123A |
| MicroWorld-eScan | Trojan.Agent.LightNeuron.B |
| Microsoft | Backdoor:Win32/Turla.TA |
| NANO-Antivirus | Trojan.Win64.LightNeuron.fqhfvh |
| Paloalto | generic.ml |
| Panda | Trj/CI.A |
| Rising | Backdoor.Turla!8.11C (KTSE) |
| Sangfor | Trojan.Win32.LightNeuron.gen |
| Skyhigh | Generic trojan.px |
| Sophos | Troj/Turla-AO |
| Symantec | ML.Attribute.HighConfidence |
| Tencent | Malware.Win32.Gencirc.115d3d96 |
| TrellixENS | Generic .px |
| TrendMicro | BKDR64_LIGHTNEURON.ZYGE-A |
| TrendMicro-HouseCall | BKDR64_LIGHTNEURON.ZYGE-A |
| VBA32 | Trojan.LightNeuron |
| VIPRE | Trojan.Agent.LightNeuron.B |
| Varist | W64/ABTrojan.RSGX-2906 |
| ViRobot | Trojan.Win64.S.Agent.243712.B |
| VirIT | Backdoor.Win32.LightNeuron.BNU |
| Webroot | W32.Malware.gen |
| Xcitium | Malware@#t626z1jidism |
| Yandex | Trojan.LightNeuron!deSOPffOlzw |
| Zillya | Trojan.LightNeuron.Win32.1 |
| ZoneAlarm | Troj/Turla-AO |
| alibabacloud | Backdoor:Win/Turla.CW |
| huorong | Trojan/Generic!A72EAA29F720CC53 |
| Arcabit | Trojan.Turla.18 |
| BitDefender | Trojan.Turla.18 |
| Bkav | W32.Malware.736C4FA3 |
| ESET-NOD32 | Win64/Turla.CC trojan |
| Emsisoft | Trojan.Turla.18 (B) |
| GData | Trojan.Turla.18 |
| K7AntiVirus | Riskware ( 0040eff71 ) |
| K7GW | Riskware ( 0040eff71 ) |
| MicroWorld-eScan | Trojan.Turla.18 |
| Skyhigh | BehavesLike.Win64.Injector.dh |
| VIPRE | Trojan.Turla.18 |
Process list
| Name | Command line |
|---|
| rundll32.exe | %WINDIR%\System32\rundll32.exe "C:\BPA.Transport.dll",#1 |
| rundll32.exe | "C:\BPA.Transport.dll",#1 |
| rundll32.exe | %WINDIR%\System32\rundll32.exe "C:\BPA.Transport.dll",#2 |
| rundll32.exe | "C:\BPA.Transport.dll",#2 |
| rundll32.exe | %WINDIR%\System32\rundll32.exe "C:\BPA.Transport.dll",#3 |
| rundll32.exe | "C:\BPA.Transport.dll",#3 |
| <Ignored Process> | |
| rundll32.exe | "C:\BPA.Transport.dll",#1 |
| rundll32.exe | "C:\BPA.Transport.dll",#2 |
| WerFault.exe | -u -p 3340 -s 164 |
| rundll32.exe | "C:\BPA.Transport.dll",#3 |
| WerFault.exe | -u -p 2528 -s 148 |