Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: SideCopy has used a legitimate DLL file name, `Duser.dll` to disguise a malicious remote access tool.