No access to ssh but still want to have access to data

Very Recently, My Linode got hacked. SSHed by an attacker that is using my paid money to (maybe) crypto mine as the 100% CPU.
As the owner of the server i have tried to change the password and failed. As of today Linode sent me and an email alerting of high CPU usage. I want to see any activity on this linode before I delete it.
Is there anyway to back it up? Do I need to pay for backup to backup in my pc as .img?