TrailBlazer

Description

(CrowdStrike) TrailBlazer is a sophisticated malware family that provides modular functionality and a very low prevalence. The malware shares high-level functionality with other malware families. In particular, the use of random identifier strings for C2 operations and result codes, and attempts to hide C2 communications in seemingly legitimate web traffic, were previously observed tactics, techniques and procedures (TTPs) in GoldMax and SUNBURST.

Names

Name
TrailBlazer

Category

Malware

Type

• Backdoor

Information

• https://www.crowdstrike.com/blog/observations-from-the-stellarparticle-campaign/

Mitre Attack

• https://attack.mitre.org/software/S0682/

Other Information

Uuid

ee19893f-691b-4cc4-9cdb-0ff0b2bd149c

Last Card Change

2022-12-30