import "hash"

rule ogurexxx_a8460f446be54041
{
    meta:
        description = "File dropped in the ogurexxx.ru SSH honeypot"
        sha256 = "a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2"
        date = "2026-10-31"
    condition:
        hash.sha256(0, filesize) == "a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2"
}