import "hash"

rule ogurexxx_94f2e4d8d4436874
{
    meta:
        description = "File dropped in the ogurexxx.ru SSH honeypot, resembles XMRig"
        sha256 = "94f2e4d8d4436874785cd14e6e6d403507b8750852f7f2040352069a75da4c00"
        date = "2026-10-31"
    condition:
        hash.sha256(0, filesize) == "94f2e4d8d4436874785cd14e6e6d403507b8750852f7f2040352069a75da4c00"
}