Deletes itself

Reads EFI boot settings

Reads EFI boot settings from the efivars filesystem, may contain security secrets or sensitive data.

Attempts to change immutable files

Modifies inode attributes on the filesystem to allow changing of immutable files.

Checks CPU configuration

Checks CPU information which indicate if the system is a virtual machine.

Creates a large amount of network flows

This may indicate a network scan to discover remotely running services.

Enumerates running processes

Discovers information about currently running processes on the system

Reads CPU attributes