Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: WastedLocker has copied a random file from the Windows System32 folder to the <code>%APPDATA%</code> location under a different hidden filename.