A custom script was executed on a compromised machine to install a backdoor for persistent access and command execution. The script was executed by an unauthorized process, indicating advanced attacker capabilities.