OSX.XLoader hides little except its main purpose: What we learned in the installation process

XLoader appears to be distributed within a .jar file. Such a file contains code that can be executed by Java, dropping the malware on the system. One major advantage, for the attacker, of using Java is that the “dropper” can be cross-platform.