Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: ThiefQuest searches through the <code>/Users/</code> folder looking for executable files. For each executable, ThiefQuest prepends a copy of itself to the beginning of the file. When the file is executed, the ThiefQuest code is executed first. ThiefQuest creates a hidden file, copies the original target executable to the file, then executes the new hidden file to maintain the appearance of normal behavior.