H3XA — Operational Evidence

TypeMalware

External ID—

First seen2026-08-14

Last seen2026-08-14

Confidence

—

[Dyre](https://attack.mitre.org/software/S0024) is a banking Trojan that has been used for financial gain. (Citation: Symantec Dyre June 2015)(Citation: Malwarebytes Dyreza November 2015)

Labels

malware

17 recorded

Relationships

uses

to Deobfuscate/Decode Files or Information

Technique

uses

to Dynamic-link Library Injection

Technique

uses

to Exfiltration Over C2 Channel

Technique

uses

to Ingress Tool Transfer

Technique

uses

to Local Data Staging

Technique

uses

to Process Injection

Technique

uses

to Scheduled Task

Technique

uses

to Software Discovery

Technique

uses

to Software Packing

Technique

uses

to System Checks

Technique

uses

to System Information Discovery

Technique

uses

to System Network Configuration Discovery

Technique

uses

to System Owner/User Discovery

Technique

uses

to System Service Discovery

Technique

uses

to Web Protocols

Technique

uses

to Windows Service

Technique

uses

from Wizard Spider

Group

7 external

References

mitre-attack

S0024

open

Dyre

—

Dyzap

—

Dyreza

—

Symantec Dyre June 2015

http://www.symantec.com/content/en/us/enterprise/media/security_response/whitepapers/dyre-emerging-threat.pdf

open

Malwarebytes Dyreza November 2015

https://blog.malwarebytes.com/threat-analysis/2015/11/a-technical-look-at-dyreza/

open

Sophos Dyreza April 2015

https://nakedsecurity.sophos.com/2015/04/20/notes-from-sophoslabs-dyreza-the-malware-that-discriminates-against-old-computers/

open