Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: BADHATCH can inject itself into an existing explorer.exe process by using `RtlCreateUserThread`.