GetProcAddress

Featured in Techniques

Technique Name	Technique ID's	Snippet(s)	Rules(s)	OS
NtSetInformationThread	U0119 B0001.014
NtQueryObject	U0118 B0001.013
CsrGetProcessID	U0115
IsDebugged Flag	U0113 B0001.019
NtGlobalFlag	U0111 B0001.036
API Obfuscation	U0217 B0032.001
DLL Injection via CreateRemoteThread and LoadLibrary	U1226 E1055.001
NtSetDebugFilterState	U0103
Reflective DLL injection	U1224
Atom Bombing	U1220
Extra Window Memory Injection	U1219 E1055.011
Injection using Shims	U1218 E1055.m03
Inline Hooking	U1211 F0015.002
Kill Process	U0403
NTFS Files Attributes	U0501
Indicator Removal: Timestomp	U0303 T1070.006
File Melt	U1007
Detecting Online Sandbox	U1338
Killing Windows Event Log	U0304
Disabling Event Tracing for Windows (ETW)	U0306
ProcEnvInjection - Remote code injection by abusing process environment strings	U1235
Thwarting Stack-Frame Analysis	U0219
Unloading Sysmon Driver	U0407
Tamper DLL Export Names & GetProcAddress Spoofing	U1241
Dirty Vanity	U1242

Sample Name	Matching Techniques	First Seen	Last Seen
Torture.exe	9	2025-12-16	1 day, 17 hours ago
main.exe	4	2025-12-14	3 days, 19 hours ago
efak.exe	6	2025-12-13	4 days, 12 hours ago
P8PA4H.exe	1	2025-12-11	6 days, 22 hours ago
Lab01-03 (1).exe	4	2025-09-26	1 week ago
cmd.exe	7	2025-12-10	1 week, 1 day ago
setup.exe	11	2025-12-09	1 week, 1 day ago
738a31e7a0d96fe1b0ad6778db39...ac33ce8a84f26b71c00c26b9.exe	4	2025-12-07	1 week, 4 days ago
pafish64.exe	10	2025-12-06	1 week, 4 days ago
3KTrangXinhTQ.exe	2	2025-12-01	2 weeks, 3 days ago