Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: APIs and strings in some TYPEFRAME variants are RC4 encrypted. Another variant is encoded with XOR.