Creates/modifies Cron job

Cron allows running tasks on a schedule, and is commonly used for malware persistence.

Modifies Bash startup script

Modifies init.d

Adds/modifies system service, likely for persistence.

Modifies rc script

Adding/modifying system rc scripts is a common persistence mechanism.

Write file to user bin folder

Enumerates kernel/hardware configuration

Reads contents of /sys virtual filesystem to enumerate system information.

Reads runtime system information

Reads data from /proc virtual filesystem.

Writes file to tmp directory

Malware often drops required files in the /tmp directory.