text: {
      "type": "bundle",
      "id": "bundle--4ec75f30-2415-4ef5-81d0-c7443b8c9f9d",
      "spec_version": "2.0",
      "objects": [
          {
              "id": "relationship--6d102ef8-c831-413d-b2cb-392517638b0b",
              "created_by_ref": "identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5",
              "description": "[Zebrocy](https://attack.mitre.org/software/S0251) uses HTTP for C2.(Citation: Palo Alto Sofacy 06-2018)(Citation: Unit42 Cannon Nov 2018)(Citation: ESET Zebrocy Nov 2018)(Citation: Unit42 Sofacy Dec 2018)(Citation: ESET Zebrocy May 2019)(Citation: Accenture SNAKEMACKEREL Nov 2018)",
              "object_marking_refs": [
                  "marking-definition--fa42a846-8d90-4e51-bc29-71d5b4802168"
              ],
              "external_references": [
                  {
                      "url": "https://researchcenter.paloaltonetworks.com/2018/06/unit42-sofacy-groups-parallel-attacks/",
                      "description": "Lee, B., Falcone, R. (2018, June 06). Sofacy Group\u2019s Parallel Attacks. Retrieved June 18, 2018.",
                      "source_name": "Palo Alto Sofacy 06-2018"
                  },
                  {
                      "source_name": "Unit42 Cannon Nov 2018",
                      "url": "https://researchcenter.paloaltonetworks.com/2018/11/unit42-sofacy-continues-global-attacks-wheels-new-cannon-trojan/",
                      "description": "Falcone, R., Lee, B. (2018, November 20). Sofacy Continues Global Attacks and Wheels Out New \u2018Cannon\u2019 Trojan. Retrieved November 26, 2018."
                  },
                  {
                      "source_name": "ESET Zebrocy Nov 2018",
                      "url": "https://www.welivesecurity.com/2018/11/20/sednit-whats-going-zebrocy/",
                      "description": "ESET. (2018, November 20). Sednit: What\u2019s going on with Zebrocy?. Retrieved February 12, 2019."
                  },
                  {
                      "description": "Lee, B., Falcone, R. (2018, December 12). Dear Joohn: The Sofacy Group\u2019s Global Campaign. Retrieved April 19, 2019.",
                      "url": "https://unit42.paloaltonetworks.com/dear-joohn-sofacy-groups-global-campaign/",
                      "source_name": "Unit42 Sofacy Dec 2018"
                  },
                  {
                      "source_name": "ESET Zebrocy May 2019",
                      "url": "https://www.welivesecurity.com/2019/05/22/journey-zebrocy-land/",
                      "description": "ESET Research. (2019, May 22). A journey to Zebrocy land. Retrieved June 20, 2019."
                  },
                  {
                      "description": "Accenture Security. (2018, November 29). SNAKEMACKEREL. Retrieved April 15, 2019.",
                      "url": "https://www.accenture.com/t20181129T203820Z__w__/us-en/_acnmedia/PDF-90/Accenture-snakemackerel-delivers-zekapab-malware.pdf#zoom=50",
                      "source_name": "Accenture SNAKEMACKEREL Nov 2018"
                  }
              ],
              "source_ref": "malware--a4f57468-fbd5-49e4-8476-52088220b92d",
              "relationship_type": "uses",
              "target_ref": "attack-pattern--df8b2a25-8bdf-4856-953c-a04372b1c161",
              "type": "relationship",
              "modified": "2020-03-17T02:54:27.611Z",
              "created": "2018-10-17T00:14:20.652Z"
          }
      ]
  }