Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: REvil can download a copy of itself from an attacker controlled IP address to the victim machine.