File and Directory Permissions Modification

Adversaries may modify file or directory permissions to evade defenses.

Indicator Removal: Clear Command History

Adversaries may remove indicators of compromise from the host to evade detection.

Executes dropped EXE

Creates/modifies Cron job

Cron allows running tasks on a schedule, and is commonly used for malware persistence.

Deletes log files

Deletes log files on the system.

Enumerates running processes

Discovers information about currently running processes on the system

Writes file to system bin folder