Which is the best way to deliver an existing and obfuscated malware?

[leadtheway]

How to deliver it: using some social engineering, is it possible to hide it in a picture (expect steganography, cus i need to decode it on the machine)
I will welcome any ideas you provide
Thanks