Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: Darkhotel has dropped an mspaint.lnk shortcut to disk which launches a shell script that downloads and executes a file.