Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: MarkiRAT can modify the shortcut that launches Telegram by replacing its path with the malicious payload to launch with the legitimate executable.