All Detections

Modular ChonkyChicken Plugin Delivery: Correlated Temp-File Write + LoadLibraryA Sequence

avatar
Duo Tech@duotech
updated Jul 24, 2026006

Detects the modular ChonkyChicken plugin sequence: module_request/module_load C2 exchange, temp-file write, and LoadLibraryA load.

Cortex XDR