H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Malware

TrailBlazer

[TrailBlazer](https://attack.mitre.org/software/S0682) is a modular malware that has been used by [APT29](https://attack.mitre.org/groups/G0016) since at least 2019.(Citation: CrowdStrike StellarParticle January 2022)

Malware
TypeMalware
External ID—
First seen2026-08-14
Last seen2026-08-14

Confidence

—

[TrailBlazer](https://attack.mitre.org/software/S0682) is a modular malware that has been used by [APT29](https://attack.mitre.org/groups/G0016) since at least 2019.(Citation: CrowdStrike StellarParticle January 2022)

Labels

malware
7 recorded

Relationships

uses
from APT29
Group
uses
from SolarWinds Compromise
Campaign
uses
to Data Obfuscation
Technique
uses
to Junk Data
Technique
uses
to Masquerading
Technique
uses
to Web Protocols
Technique
uses
to Windows Management Instrumentation Event Subscription
Technique
2 external

References

mitre-attack
S0682
open
CrowdStrike StellarParticle January 2022
https://www.crowdstrike.com/blog/observations-from-the-stellarparticle-campaign/
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance