uses 's malleable C2 functionality to blend in with network traffic.(Citation: FireEye APT32 May 2017)(Citation: GitHub Malleable C2)(Citation: Cybereason Cobalt Kitty 2017) The group's backdoor can also exfiltrate data by encoding it in the subdomain field of DNS packets.(Citation: ESET OceanLotus Mar 2019) Additionally one of the group's macOS backdoors implements a specific format for the C2 packet involving random values.
Below is an instruction that describes a task, paired with an input that provides further context. Write a response that appropriately completes the request. ### Instruction: List the MITRE techniques contained in the text. ### Input: uses 's malleable C2 functionality to blend in with network traffic.(Citation: FireEye APT32 May 2017)(Citation: GitHub Malleable C2)(Citation: Cybereason Cobalt Kitty 2017) The group's backdoor can also exfiltrate data by encoding it in the subdomain field of DNS packets.(Citation: ESET OceanLotus Mar 2019) Additionally one of the group's macOS backdoors implements a specific format for the C2 packet involving random values. ### Response: T1094.