|||
|---|---|
|**ID**|**E1204**|
|**Objective(s)**|[Execution](../execution)|
|**Related ATT&CK Technique**|[User Execution](https://attack.mitre.org/techniques/T1204)|


User Interaction
================
Malware may include code that relies on specific actions by a user to execute. Note that this MBC behavior differs from [User Execution](https://attack.mitre.org/techniques/T1204) in that it does do not include direct code execution (user action for *initial* execution) - MBE does not encompass ATT&CK's Initial Access Tactic.  

**See ATT&CK Technique:** [**User Execution**](https://attack.mitre.org/techniques/T1204).

Malware Examples
----------------
|Name|Date|Description|
|---|---|---|
|[**TrickBot**](../xample-malware/trickbot.md)|2016|Trojan spyware program that has mainly been used for targeting banking sites.|