Skip to content
MalwareWiki

Loader

Leslieloader

Leslieloader is a loader written in Golang, named after the observed AES decryption key referencing deceased actor, Leslie Cheung.

Leslieloader is a Windows loader.

Background

Leslieloader is a Golang-based loader whose name comes from the AES decryption key observed in samples, which references the late actor Leslie Cheung. It supports the initial compromise and delivery of the malicious payload so it can run on the host, working by decoding and decrypting a secondary payload binary and then injecting it into another process.

Source: Malpedia (Fraunhofer FKIE).