T1047 Windows Management Instrumentation in real malware

ATT&CK technique T1047 Windows Management Instrumentation appears in 1 publicly analyzed sample on MalwareAnalyzer by Cyble, 0.0% of the analyzed corpus. Seven-day prevalence is flat (0 recent vs 0 prior). Most associated families: Maener.

Tactics: execution

Prevalence in the corpus

• Samples exhibiting T1047: 1
• Share of analyzed corpus: 0.0%
• Last 7 days: 0 · prior 7 days: 0 (flat)

Malware families using T1047

• Maener - 1 sample

Example samples

• ba2c3a313c95be9da7ed09e0f06dcdbabf90e2fb2a042efb9482b711b3b16619 - malicious

Canonical technique definition: MITRE ATT&CK T1047 (ATT&CK v19.1, CC BY 4.0).

Frequently asked about T1047

How common is ATT&CK T1047 (Windows Management Instrumentation) in real malware?

ATT&CK technique T1047 Windows Management Instrumentation appears in 1 publicly analyzed sample on MalwareAnalyzer by Cyble, 0.0% of the analyzed corpus. Seven-day prevalence is flat (0 recent vs 0 prior). Most associated families: Maener.

Which malware families use T1047?

In this corpus T1047 is most associated with Maener (1). Counts are analyzed samples per family in which the technique was observed.

What share of analyzed samples use T1047?

0.0% of the publicly analyzed corpus (1 of 113928 samples) exhibits T1047. Technique attribution comes from behavior captured during real sandbox detonation and from static analysis, not from a vendor label.

All ATT&CK techniques in the corpus · Latest analyzed threats