import "hash"

rule ogurexxx_f0aa83bbbd2c75e2
{
    meta:
        description = "File dropped in the ogurexxx.ru SSH honeypot"
        sha256 = "f0aa83bbbd2c75e2f71ec16029ee5fcfad59f3a8efa30a500b815f0f6c18d987"
        date = "2026-10-31"
    condition:
        hash.sha256(0, filesize) == "f0aa83bbbd2c75e2f71ec16029ee5fcfad59f3a8efa30a500b815f0f6c18d987"
}