nanomet is another meterpreter stager, similar to TinyMet, written in C: https://github.com/kost/nanomet

I have encountered this malware in real-life intrusions and at attack/defend CTFs.

rule nanomet
{
	meta:
		description = "https://github.com/kost/nanomet"

	strings:
		$a = "github.com/kost/nanomet"
		$b = "nanomet.exe"
		$c = "Available transports are as follows:"

	condition:
		all of them
}

YARA Rules Index