Dyre
Software · ATTACK:enterprise:S0024
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S0024",
"title": "Dyre",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S0024",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--63c2a130-8a5b-452f-ad96-07cf0af12ffe",
"external_id": "S0024",
"domain": "enterprise",
"created": "2017-05-31T21:32:19.746Z",
"modified": "2025-04-25T14:43:34.862Z",
"version": "1.2",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "Dyre"
},
{
"source_name": "Dyzap"
},
{
"source_name": "Dyreza"
},
{
"source_name": "Symantec Dyre June 2015",
"url": "http://www.symantec.com/content/en/us/enterprise/media/security_response/whitepapers/dyre-emerging-threat.pdf"
},
{
"source_name": "Malwarebytes Dyreza November 2015",
"url": "https://blog.malwarebytes.com/threat-analysis/2015/11/a-technical-look-at-dyreza/"
},
{
"source_name": "Sophos Dyreza April 2015",
"url": "https://nakedsecurity.sophos.com/2015/04/20/notes-from-sophoslabs-dyreza-the-malware-that-discriminates-against-old-computers/"
}
]
}Explicit source assertions (17)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S0024 → uses → ATTACK:enterprise:T1016
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--03732f50-c46c-49f1-bd47-cc56bb96cf23
Malwarebytes Dyreza November 2015ATTACK:enterprise:S0024 → uses → ATTACK:enterprise:T1033
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--143dbc8a-0b00-4510-aacf-96437d87ea2b
Malwarebytes Dyreza November 2015ATTACK:enterprise:S0024 → uses → ATTACK:enterprise:T1497.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--17f9d6c8-f938-4532-b834-3834655911b8
Symantec Dyre June 2015 · Malwarebytes Dyreza November 2015ATTACK:enterprise:S0024 → uses → ATTACK:enterprise:T1074.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2d82c7df-baa0-4268-855d-03df92fa35ab
Malwarebytes Dyreza November 2015ATTACK:enterprise:S0024 → uses → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--47cd42b3-1a19-415f-8522-a601268d8017
Symantec Dyre June 2015ATTACK:enterprise:S0024 → uses → ATTACK:enterprise:T1055.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--508879cf-53b7-4578-9a5f-9ed20dfb09ef
Symantec Dyre June 2015ATTACK:enterprise:S0024 → uses → ATTACK:enterprise:T1053.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--57828888-a833-44c7-af2c-e250d799a9bc
Malwarebytes Dyreza November 2015ATTACK:enterprise:G0102 → uses → ATTACK:enterprise:S0024
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--61805115-3044-4ed7-91f4-074b2a073e02
Forbes Dyre May 2017 · CrowdStrike Wizard Spider March 2019 · Malwarebytes TrickBot Sep 2019ATTACK:enterprise:S0024 → uses → ATTACK:enterprise:T1140
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6d1074cb-a9eb-4237-b8b2-d823cfa1408b
Symantec Dyre June 2015 · Malwarebytes Dyreza November 2015ATTACK:enterprise:S0024 → uses → ATTACK:enterprise:T1071.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--812073c3-43c5-4f92-b396-56b669eee0ad
Symantec Dyre June 2015 · Malwarebytes Dyreza November 2015ATTACK:enterprise:S0024 → uses → ATTACK:enterprise:T1082
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c1a4334d-8975-4ca2-8734-d6c26e36702a
Malwarebytes Dyreza November 2015ATTACK:enterprise:S0024 → uses → ATTACK:enterprise:T1027.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c6467df1-e2fd-4fff-b647-606be50a9078
Malwarebytes Dyreza November 2015ATTACK:enterprise:S0024 → uses → ATTACK:enterprise:T1055
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d9c19c4a-a2e3-41f9-b508-d0d008c08993
Malwarebytes Dyreza November 2015ATTACK:enterprise:S0024 → uses → ATTACK:enterprise:T1518
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e4489924-d87d-4a18-8702-418361f6a2bb
Malwarebytes Dyreza November 2015ATTACK:enterprise:S0024 → uses → ATTACK:enterprise:T1543.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e9d2213a-81cf-45e3-876f-825d4ff2afae
Symantec Dyre June 2015ATTACK:enterprise:S0024 → uses → ATTACK:enterprise:T1041
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ed543016-8c64-42dd-89e1-7c6a49791d80
Malwarebytes Dyreza November 2015ATTACK:enterprise:S0024 → uses → ATTACK:enterprise:T1007
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f79947b2-49bc-4658-b93c-3aa9dbf9cd5e
Malwarebytes Dyreza November 2015