Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: RedLeaves has encrypted C2 traffic with RC4, previously using keys of 88888888 and babybear.