GetProcAddress

Featured in Techniques

Technique Name	Technique ID's	Snippet(s)	Rules(s)	OS
NtSetInformationThread	U0119 B0001.014
NtQueryObject	U0118 B0001.013
CsrGetProcessID	U0115
IsDebugged Flag	U0113 B0001.019
NtGlobalFlag	U0111 B0001.036
API Obfuscation	U0217 B0032.001
DLL Injection via CreateRemoteThread and LoadLibrary	U1226 E1055.001
NtSetDebugFilterState	U0103
Reflective DLL injection	U1224
Atom Bombing	U1220
Extra Window Memory Injection	U1219 E1055.011
Injection using Shims	U1218 E1055.m03
Inline Hooking	U1211 F0015.002
Kill Process	U0403
NTFS Files Attributes	U0501
Indicator Removal: Timestomp	U0303 T1070.006
File Melt	U1007
Detecting Online Sandbox	U1338
Killing Windows Event Log	U0304
Disabling Event Tracing for Windows (ETW)	U0306
ProcEnvInjection - Remote code injection by abusing process environment strings	U1235
Thwarting Stack-Frame Analysis	U0219
Unloading Sysmon Driver	U0407
Tamper DLL Export Names & GetProcAddress Spoofing	U1241
Dirty Vanity	U1242

Sample Name	Matching Techniques	First Seen	Last Seen
setup.exe	11	2025-12-09	4 hours, 57 minutes ago
738a31e7a0d96fe1b0ad6778db39...ac33ce8a84f26b71c00c26b9.exe	4	2025-12-07	2 days, 10 hours ago
pafish64.exe	10	2025-12-06	2 days, 21 hours ago
3KTrangXinhTQ.exe	2	2025-12-01	1 week, 1 day ago
Launcher.exe	5	2025-11-30	1 week, 2 days ago
Lazy-Loot.exe	5	2025-11-27	1 week, 5 days ago
crossa.exe	2	2025-11-25	2 weeks ago
rlm1611_http.dll	6	2025-11-22	2 weeks, 3 days ago
ekrn.exe	5	2025-11-19	2 weeks, 5 days ago
c09065e575639c63ee5e74b4def1...a5454d3a98302478f7840338.exe	8	2025-11-05	1 month ago