TinyMet is a small meterpreter stager, written in C++: https://github.com/SherifEldeeb/TinyMet

I have encountered this malware used in intrusions as well as at attack/defend CTFs.

rule tinymet
{
	meta:
		description = "https://github.com/SherifEldeeb/TinyMet"

	strings:
		$a = "tinymet.com"
		$b = "TinyMet"
		$c = "Available transports are as follows:"

	condition:
		all of them
}

YARA Rules Index