rule M_Hunting_3CXDesktopApp_Key {
	meta:
		disclaimer = "This rule is meant for hunting and is not tested to run in a production environment"
		description = "Detects a key found in a malicious 3CXDesktopApp file"
		md5 = "74bc2d0b6680faa1a5a76b27e5479cbc"
		date = "2023/03/29"
		version = "1"
	strings:
		$key = "3jB(2bsG#@c7" ascii wide
	condition:
		$key
}