installed its payload in the startup programs folder as Baidu Software Update. The group also adds its second stage payload to the startup programs as Net Monitor.(Citation: Cymmetria Patchwork) They have also dropped  binaries as files named microsoft_network.exe and crome.exe.
Below is an instruction that describes a task, paired with an input that provides further context. Write a response that appropriately completes the request. ### Instruction: List the MITRE techniques contained in the text. ### Input: installed its payload in the startup programs folder as Baidu Software Update. The group also adds its second stage payload to the startup programs as Net Monitor.(Citation: Cymmetria Patchwork) They have also dropped  binaries as files named microsoft_network.exe and crome.exe. ### Response: T1036.005.