.NET Reflective Loader malware

.NET Reflective Loader is a malware family identified by Malva.RE's static analysis engine through dedicated YARA rules and collectors.

Malva.RE has analysed 14 public samples tagged .NET Reflective Loader, statically and without execution. The latest public sample was seen on 2026-10-19.

File types

PE Executable13
Rar Archive1

Latest public .NET Reflective Loader samples

Sample	Type	First seen
d6055b5594b16f82fce35db1a693e65fcf6209facbd90f755815e0e7b7791e7f	PE Executable	2026-10-19
86dfa03616288994385a6aaf1106e1320d92096122b376f2ef6229c73fc1ee0d	Rar Archive	2026-10-14
08954f9446234a2fafe12537884cfd684df960b6d28527f6777248518ab7e526	PE Executable	2026-10-09
08edc0df73427e600402e4f2529d5284b17ccb16f4c24594869ca7e6ddc33936	PE Executable	2026-09-28
080dfb9d893d2dd995e8fb81a4098a8d908c563e38d70a8e5bc15debcf1f065a	PE Executable	2026-09-10
2423704f01108fc081ac5257cc60ed6ca266c3958c721cf091f98a6c103813df	PE Executable	2026-09-10
d8ef460c9a9914057ee4ccd122e74ca078a6b09e03f8b4a2f99a4139a78df29d	PE Executable	2026-09-10
b24fefefe8a95d6a765caff9b0ae40ed480dfdbfe2e5a46848b1a9d895ec83e3	PE Executable	2026-07-22
f2145437eba0d3bb81c9b7bc905b4cd26a546a8b9a958e5e8ad5c38c0323dcda	PE Executable	2026-07-15
bc6d86cef1b7404823c1d830387b2c9b1289c453620482fc1749dd5d2ade3897	PE Executable	2026-07-14
3bce373a6a8b4a35e50d54469fe16ad229267578960589bdc6951195b6de98fb	PE Executable	2026-07-14
7f1c566eee880bce9a3f80880badee548b53ab3aded225c654faeff9cf0349df	PE Executable	2026-07-14
0e4e0247476003c3efef81eba6fdc6c98876d15ae4fd81994a2a58c598c2011d	PE Executable	2026-07-14
81c589fae253795f2a6625709d192409df2349b929b3ea692b8ea3af08767ffd	PE Executable	2026-07-13

Analyse your own .NET Reflective Loader sample

Malva.RE unpacks, decompiles and extracts the configuration of suspicious files statically — the file is never executed. Free-plan reports are public.

Analyse a file for free