ABOUT
Overview
Use Cases
Mapping Methodology
Scoring Rubric
Related Projects
ATT&CK OBJECTS
Matrix
Tactics
Techniques
MAPPING FRAMEWORKS
About Mappings
Amazon Web Services (AWS)
Azure
CVE
Google Cloud Platform (GCP)
NIST 800-53
M365
VERIS
You're currently viewing ATT&CK Version 9.0 Enterprise and VERIS 1.3.5.
Change versions here.
Home
Mapping Frameworks
VERIS Home
Email via user-executed attachment. Child of 'Email'
VERIS
action.malware.vector.Email attachment
Mappings
Mappings
ATT&CK Version
9.0
ATT&CK Domain
Enterprise
VERIS
1.3.5
Change Versions
Capability ID
Capability Description
Mapping Type
ATT&CK ID
ATT&CK Name
action.malware.vector.Email attachment
Email via user-executed attachment. Child of 'Email'
related-to
T1059.005
Command and Scripting Interpreter: Visual Basic
action.malware.vector.Email attachment
Email via user-executed attachment. Child of 'Email'
related-to
T1059.007
Command and Scripting Interpreter: JavaScript
action.malware.vector.Email attachment
Email via user-executed attachment. Child of 'Email'
related-to
T1203
Exploitation for Client Execution
action.malware.vector.Email attachment
Email via user-executed attachment. Child of 'Email'
related-to
T1036
Masquerading
action.malware.vector.Email attachment
Email via user-executed attachment. Child of 'Email'
related-to
T1204.002
User Execution: Malicious File
action.malware.vector.Email attachment
Email via user-executed attachment. Child of 'Email'
related-to
T1566.001
Phishing: Spearphishing Attachment
action.malware.vector.Email attachment
Email via user-executed attachment. Child of 'Email'
related-to
T1598.002
Phishing for Information: Spearphishing Attachment