reverse-engineering-dotnet-malware-with-dnspy

What problem does it solve?

This Skill enables security researchers and defenders to systematically reverse-engineer .NET malware samples, understand their behavior, and extract actionable indicators for defense.

Core Features & Use Cases

• Decompilation & Analysis: Use dnSpy to inspect C# / VB.NET sources, deobfuscate code, and trace execution paths.
• Configuration Discovery: Identify hardcoded C2 endpoints, mutexes, and encryption keys to map the malware's operations.
• Threat Research & Documentation: Produce structured reports and IOCs for incident response, red team, and OSINT research.

Quick Start

Load a .NET malware sample in dnSpy and begin step-by-step analysis to reveal deobfuscated logic and hardcoded IOCs.