Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: MarkiRAT can masquerade as <code>update.exe</code> and <code>svehost.exe</code>; it has also mimicked legitimate Telegram and Chrome files.