Tag195 Chonkychicken Chromeggscalator Strings

Duo Tech@duotech

•updated Jul 24, 2026•0•0•3

Detects PE files from the TAG-195 TinyEgg/ChonkyChicken/ChromEggscalator MaaS family via co-occurrence of distinctive embedded command markers, debug flags, and log path strings, requiring at least two markers to reduce false positives from individually generic strings