SharpWMI

Malware type
trojan
Profile updated
2026-07-07 13:17:01

Context

According to its Github repository, SharpWMI is a C# implementation of various WMI functionality.

Detection coverage

  • 3 YARA rules

Detection rules

  • DITEKSHEN_INDICATOR_TOOL_PET_Sharpwmi (yara-rule)
  • SIGNATURE_BASE_HKTL_NET_GUID_Sharpwmi_1 (yara-rule)
  • SIGNATURE_BASE_HKTL_NET_GUID_Sharpwmi_2 (yara-rule)

Reports & references

  • Cisco Talos — Uat 8837 (report)
  • malpedia.caad.fkie.fraunhofer.de — Win.Sharpwmi (report)

External references