The group clearly shows a preference for using a simple downloader like Zebrocy as first-stage payloads in these attacks
Below is an instruction that describes a task, paired with an input that provides further context. Write a response that appropriately completes the request. ### Instruction: List the MITRE techniques contained in the text. ### Input: The group clearly shows a preference for using a simple downloader like Zebrocy as first-stage payloads in these attacks ### Response: T1027.