MITRE ATT&CKsoftware (malware)
S0024 Dyre
- Domain
- enterprise
- Platforms
- Windows
- Aliases
- Dyzap, Dyreza
- Version
- 1.2
- Created
- 2017-05-31
Description
Dyre is a banking Trojan that has been used for financial gain.
Related
Uses · MITRE ATT&CK (16)
- T1071.001 Web Protocols sub-technique
- T1074.001 Local Data Staging sub-technique
- T1497.001 System Checks sub-technique
- T1027.002 Software Packing sub-technique
- T1543.003 Windows Service sub-technique
- T1055.001 Dynamic-link Library Injection sub-technique
- T1053.005 Scheduled Task sub-technique
- T1518 Software Discovery technique
- T1140 Deobfuscate/Decode Files or Information technique
- T1007 System Service Discovery technique
- T1016 System Network Configuration Discovery technique
- T1033 System Owner/User Discovery technique
- T1041 Exfiltration Over C2 Channel technique
- T1055 Process Injection technique
- T1082 System Information Discovery technique
- T1105 Ingress Tool Transfer technique
Referenced by MITRE ATT&CK · uses (1)
- G0102 Wizard Spider group
References
- http://www.symantec.com/content/en/us/enterprise/media/security_response/whitepapers/dyre-emerging-threat.pdf Symantec Dyre June 2015
- https://blog.malwarebytes.com/threat-analysis/2015/11/a-technical-look-at-dyreza/ Malwarebytes Dyreza November 2015
- https://nakedsecurity.sophos.com/2015/04/20/notes-from-sophoslabs-dyreza-the-malware-that-discriminates-against-old-computers/ Sophos Dyreza April 2015