misp-modules/tests/yara_hash_module_test.yara

import "hash"
rule oui {
    condition:
        hash.md5(0, filesize) == "8764605c6f388c89096b534d33565802" and
        hash.sha1(0, filesize) == "46aba99aa7158e4609aaa72b50990842fd22ae86" and
        hash.sha256(0, filesize) == "ec5aedf5ecc6bdadd4120932170d1b10f6cfa175cfda22951dfd882928ab279b"
}