From 1e7bbd1bfd05e58585c4d01e55fa746587de2b03 Mon Sep 17 00:00:00 2001
From: S3N4T0R <121706460+S3N4T0R-0X0@users.noreply.github.com>
Date: Sun, 29 Dec 2024 07:36:52 -0500
Subject: [PATCH] Update README.md

---
 Chinese APT/Wicked Panda/README.md | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/Chinese APT/Wicked Panda/README.md b/Chinese APT/Wicked Panda/README.md
index c46ea4a..7db0c7a 100644
--- a/Chinese APT/Wicked Panda/README.md	
+++ b/Chinese APT/Wicked Panda/README.md	
@@ -107,6 +107,9 @@ This payload is a malicious program that establishes a reverse shell to an attac
         Opens a cmd.exe process on the victim's machine.
         Sends commands received from the attacker to the shell and returns the output to the attacker.
 
+![Screenshot From 2024-12-29 07-31-37](https://github.com/user-attachments/assets/c8a504c7-e77a-4005-a3ad-03e33fa86943)
+
+
 2. Persistence Mechanism:
 
     Registry Manipulation:
@@ -117,3 +120,5 @@ This payload is a malicious program that establishes a reverse shell to an attac
 3. Networking:
 
     Uses Windows' Winsock API to set up the socket connection to the attacker.
+
+## Final result: payload connect to OneDrive C2 server