Windows Management Instrumentation T1047
Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is designed for programmers and is the infrastructure for management data and operations on Windows systems. WMI is an administration feature that provides a uniform environment to access…
- Tactics
- Execution
- Actors using it
- 43
- Sub-techniques
- 0
Ransomware groups reported using it
thegentlemenincransomakirasafepaynightspire
Threat actors
- Lazarus GroupNorth Korea · Labyrinth Chollima, HIDDEN COBRA, Guardians of Peace · 69 techniques
- APT41China · Wicked Panda, Brass Typhoon, BARIUM · 66 techniques
- Sandworm TeamRussia · ELECTRUM, Telebots, IRON VIKING · 64 techniques
- Mustang PandaChina · TA416, RedDelta, BRONZE PRESIDENT · 61 techniques
- Volt TyphoonChina · BRONZE SILHOUETTE, Vanguard Panda, DEV-0391 · 58 techniques
- OilRigIran · COBALT GYPSY, IRN2, APT34 · 58 techniques
- Magic HoundIran · TA453, COBALT ILLUSION, Charming Kitten · 58 techniques
- APT32Vietnam · SeaLotus, OceanLotus, APT-C-00 · 55 techniques
- Gamaredon GroupRussia · IRON TILDEN, Primitive Bear, ACTINIUM · 55 techniques
- Medusa Group52 techniques
- VOID MANTICOREIran · COBALT MYSTIQUE, Handala Hack, Homeland Justice · 51 techniques
- FIN7GOLD NIAGARA, ITG14, Carbon Spider · 50 techniques
- ChimeraChina · 49 techniques
- Wizard SpiderRussia · UNC1878, TEMP.MixMaster, Grim Spider · 49 techniques
- MuddyWaterIran · Earth Vetala, MERCURY, Static Kitten · 48 techniques
- APT29Russia · IRON RITUAL, IRON HEMLOCK, NobleBaron · 47 techniques
- Threat Group-3390China · Earth Smilodon, TG-3390, Emissary Panda · 47 techniques
- NIMBUS MANTICOREUNC1549, TA455, COBALT SMOKEY · 45 techniques
- BlackByteHecamede · 44 techniques
- FIN13Elephant Beetle · 42 techniques
- Ember BearRussia · UNC2589, Bleeding Bear, DEV-0586 · 39 techniques
- menuPassChina · Cicada, POTASSIUM, Stone Panda · 37 techniques
- LeviathanChina · MUDCARP, Kryptonite Panda, Gadolinium · 37 techniques
- MirrorFaceChina · Earth Kasha · 37 techniques
- Earth LuscaChina · TAG-22, Charcoal Typhoon, CHROMIUM · 34 techniques
- FIN6Magecart Group 6, ITG08, Skeleton Spider · 33 techniques
- FIN8Syssphinx · 31 techniques
- APT42Iran · 29 techniques
- Indrik SpiderRussia · Evil Corp, Manatee Tempest, DEV-0243 · 27 techniques
- GALLIUMChina · Granite Typhoon · 27 techniques
- Aquatic PandaChina · 25 techniques
- APT-C-36Blind Eagle, TAG-144, AguilaCiega · 25 techniques
- INC RansomGOLD IONIC · 25 techniques
- ToddyCat24 techniques
- Velvet Ant22 techniques
- TA254120 techniques
- Blue Mockingbird19 techniques
- Lotus BlossomDRAGONFISH, Spring Dragon, RADIUM · 17 techniques
- Cinnamon TempestChina · DEV-0401, Emperor Dragonfly, BRONZE STARLIGHT · 16 techniques
- WindshiftBahamut · 14 techniques
- NaikonChina · 13 techniques
- Stealth Falcon13 techniques
- Deep PandaChina · Shell Crew, WebMasters, KungFu Kittens · 10 techniques