Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: DarkGate uses AutoIt scripts dropped to a hidden directory during initial installation phases, such as `test.au3`.