Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: SombRAT can encrypt strings with XOR-based routines and use a custom AES storage format for plugins, configuration, C2 domains, and harvested data.