Deletes itself

Executes dropped EXE

Checks hardware identifiers (DMI)

Checks DMI information which indicate if the system is a virtual machine.

Creates/modifies Cron job

Cron allows running tasks on a schedule, and is commonly used for malware persistence.

Reads hardware information

Accesses system info like serial numbers, manufacturer names etc.

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.