Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: Ebury has encrypted C2 traffic using the client IP address, then encoded it as a hexadecimal string.