Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: APT32 has used RTF document that includes an exploit to execute malicious code. (CVE-2017-11882)