One variant of  locates existing driver services that have been disabled and drops its driver component into one of those service's paths replacing the legitimate executable. The malware then sets the hijacked service to start automatically to establish persistence.
Below is an instruction that describes a task, paired with an input that provides further context. Write a response that appropriately completes the request. ### Instruction: List the MITRE techniques contained in the text. ### Input: One variant of  locates existing driver services that have been disabled and drops its driver component into one of those service's paths replacing the legitimate executable. The malware then sets the hijacked service to start automatically to establish persistence. ### Response: T1574.010.