import "hash"

rule ogurexxx_8a68d1c08ea31250
{
    meta:
        description = "File dropped in the ogurexxx.ru SSH honeypot"
        sha256 = "8a68d1c08ea31250063f70b1ccb5051db1f7ab6e17d46e9dd3cc292b9849878b"
        date = "2026-10-31"
    condition:
        hash.sha256(0, filesize) == "8a68d1c08ea31250063f70b1ccb5051db1f7ab6e17d46e9dd3cc292b9849878b"
}