Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: IcedID can inject itself into a suspended msiexec.exe process to send beacons to C2 while appearing as a normal msi application.