import "hash"

rule ogurexxx_0165937bc9d7a0a3
{
    meta:
        description = "File dropped in the ogurexxx.ru SSH honeypot, resembles XMRig"
        sha256 = "0165937bc9d7a0a3572826b2cf7bb2471a61dbe910e25b2799dc3481a8d7eb6e"
        date = "2026-10-31"
    condition:
        hash.sha256(0, filesize) == "0165937bc9d7a0a3572826b2cf7bb2471a61dbe910e25b2799dc3481a8d7eb6e"
}