Credential stealing seems to be the main goal. Once executed on a machine, the fshec2 malicious payload collects information about the system such as usernames, directory listings, and hostnames ...

Bytecode is a representation of Python, compiled as a set of instructions for the Python Virtual Machine. In a simplified sense, it exists somewhere between source code and being a machine binary.