import "hash"

rule ogurexxx_a151d3f4f2422531
{
    meta:
        description = "File dropped in the ogurexxx.ru SSH honeypot, resembles XMRig"
        sha256 = "a151d3f4f2422531f30a843ffb35479596c86722bb103bdf8591105687f9b125"
        date = "2026-10-31"
    condition:
        hash.sha256(0, filesize) == "a151d3f4f2422531f30a843ffb35479596c86722bb103bdf8591105687f9b125"
}