import "hash"

rule ogurexxx_a9f54da77d951446
{
    meta:
        description = "File dropped in the ogurexxx.ru SSH honeypot, resembles XMRig"
        sha256 = "a9f54da77d9514467cb0e993ead87fb62d95227a46fba17102771aa3a62304b1"
        date = "2026-10-31"
    condition:
        hash.sha256(0, filesize) == "a9f54da77d9514467cb0e993ead87fb62d95227a46fba17102771aa3a62304b1"
}