NETXLOADER — Malware Profile

.NET loader observed delivering ransomware payloads in 2025-era Qilin-affiliate intrusions.

Attributed threat actors

• Water Galura machine-inferred link
• Qilin machine-inferred link

Read the full analysis on IntelFusions