Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: COATHANGER copies the malicious file <code>/data2/.bd.key/preload.so</code> to <code>/lib/preload.so</code>, then launches a child process that executes the malicious file <code>/data2/.bd.key/authd</code> as <code>/bin/authd</code> with the arguments <code>/lib/preload.so reboot newreboot 1</code>. This injects the malicious preload.so file into the process with PID 1, and replaces its reboot function with the malicious newreboot function for persistence.