import "hash"

rule ogurexxx_01ba4719c80b6fe9
{
    meta:
        description = "File dropped in the ogurexxx.ru SSH honeypot"
        sha256 = "01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b"
        date = "2026-10-31"
    condition:
        hash.sha256(0, filesize) == "01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b"
}