Creates/modifies Cron job

Cron allows running tasks on a schedule, and is commonly used for malware persistence.

Modifies init.d

Adds/modifies system service, likely for persistence.

Modifies rc script

Adding/modifying system rc scripts is a common persistence mechanism.

Write file to user bin folder

Reads runtime system information

Reads data from /proc virtual filesystem.

Writes file to tmp directory

Malware often drops required files in the /tmp directory.