rule M_Dropper_BURNTBATTER_1 {
	meta:
		author = "Mandiant"
		date_created = "2023/04/26"
		description = "Searches for the custom chaskey implementation"
		version = "1"
		weight = "100"
		disclaimer = "This rule is meant for hunting and is not tested to run in a production environment."
	strings:
		$chaskey_imp = { 41 81 C8 20 20 20 20 41 81 F8 6B 65 72 6E }
	condition:
		any of them
}