GetProcAddress

Featured in Techniques

Technique Name	Technique ID's	Snippet(s)	Rules(s)	OS
NtSetInformationThread	U0119 B0001.014
NtQueryObject	U0118 B0001.013
CsrGetProcessID	U0115
IsDebugged Flag	U0113 B0001.019
NtGlobalFlag	U0111 B0001.036
API Obfuscation	U0217 B0032.001
DLL Injection via CreateRemoteThread and LoadLibrary	U1226 E1055.001
NtSetDebugFilterState	U0103
Reflective DLL injection	U1224
Atom Bombing	U1220
Extra Window Memory Injection	U1219 E1055.011
Injection using Shims	U1218 E1055.m03
Inline Hooking	U1211 F0015.002
Kill Process	U0403
NTFS Files Attributes	U0501
Indicator Removal: Timestomp	U0303 T1070.006
File Melt	U1007
Detecting Online Sandbox	U1338
Killing Windows Event Log	U0304
Disabling Event Tracing for Windows (ETW)	U0306
ProcEnvInjection - Remote code injection by abusing process environment strings	U1235
Thwarting Stack-Frame Analysis	U0219
Unloading Sysmon Driver	U0407
Tamper DLL Export Names & GetProcAddress Spoofing	U1241
Dirty Vanity	U1242

Sample Name	Matching Techniques	First Seen	Last Seen
decoder.exe	4	2025-04-30	15 hours, 41 minutes ago
hmpalert.exe	8	2025-04-20	1 day, 12 hours ago
ZAP.exe	6	2025-04-26	2 days, 23 hours ago
firefox.exe	3	2025-04-26	4 days, 14 hours ago
DarkComet.exe	8	2025-04-25	5 days, 1 hour ago
TCS30Autoplay_Net.exe	6	2025-04-25	5 days, 4 hours ago
SetupEngine.exe	8	2025-04-23	1 week ago
Patch.exe	4	2025-04-21	1 week, 1 day ago
DarkComet Remover 2 Portable.exe	4	2025-04-19	1 week, 3 days ago
cs2.exe	4	2025-04-19	1 week, 4 days ago