Which among the following is the best example of the third step (delivery) in the cyber kill chain?

Creating malware to be used as a malicious attachment corresponds to the second step, Weaponization, where the attacker couples an exploit with a backdoor into a deliverable payload.

The target opening the malicious attachment and triggering the malware corresponds to the fourth step, Exploitation, where the malicious code is executed on the victim's system.

Malware being installed on the target's machine corresponds to the fifth step, Installation, where a persistent backdoor or implant is established on the compromised system.

Sending a malicious attachment via email directly maps to the Delivery phase of the Cyber Kill Chain, where the adversary transmits the weaponized payload to the target environment. This is the moment the attacker transfers control of the weapon to the target, in this case through an email vector. Delivery represents the first point at which the target has an opportunity to block the attack.