import "hash"

rule ogurexxx_d1cac82f44b54b0f
{
    meta:
        description = "File dropped in the ogurexxx.ru SSH honeypot"
        sha256 = "d1cac82f44b54b0fd244a9e4122811e9ae108a197c7a65a20fd2e7552683e68e"
        date = "2026-10-31"
    condition:
        hash.sha256(0, filesize) == "d1cac82f44b54b0fd244a9e4122811e9ae108a197c7a65a20fd2e7552683e68e"
}