text: {
      "type": "bundle",
      "id": "bundle--fd14c238-f018-4a0d-8861-af90bb9fcf68",
      "spec_version": "2.0",
      "objects": [
          {
              "created_by_ref": "identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5",
              "object_marking_refs": [
                  "marking-definition--fa42a846-8d90-4e51-bc29-71d5b4802168"
              ],
              "source_ref": "intrusion-set--88489675-d216-4884-a98f-49a89fcc1643",
              "target_ref": "attack-pattern--b3d682b6-98f2-4fb0-aa3b-b4df007ca70a",
              "external_references": [
                  {
                      "source_name": "FOX-IT May 2016 Mofang",
                      "url": "https://foxitsecurity.files.wordpress.com/2016/06/fox-it_mofang_threatreport_tlp-white.pdf",
                      "description": "Yonathan Klijnsma. (2016, May 17). Mofang: A politically motivated information stealing adversary. Retrieved May 12, 2020."
                  }
              ],
              "description": "[Mofang](https://attack.mitre.org/groups/G0103) has compressed the [ShimRat](https://attack.mitre.org/software/S0444) executable within malicious email attachments. [Mofang](https://attack.mitre.org/groups/G0103) has also encrypted payloads before they are downloaded to victims.(Citation: FOX-IT May 2016 Mofang)",
              "relationship_type": "uses",
              "id": "relationship--8ba71919-c776-4e1b-ad71-160649060d3e",
              "type": "relationship",
              "modified": "2020-05-15T18:20:15.802Z",
              "created": "2020-05-12T22:05:50.738Z"
          }
      ]
  }