diff --git a/Chinese APT/Wicked Panda/README.md b/Chinese APT/Wicked Panda/README.md index d4242af..10aee34 100644 --- a/Chinese APT/Wicked Panda/README.md +++ b/Chinese APT/Wicked Panda/README.md @@ -138,6 +138,10 @@ After that, we will go to the Certificates & secrets menu to generate the Secret ## Final result: payload connect to OneDrive By using BEAR-C2 +![Screenshot From 2024-12-30 01-55-36](https://github.com/user-attachments/assets/84af56a2-19c3-4eaa-a805-ad790a0c5143) + + +The final step in this process involves the execution of the final payload. After being decrypted and loaded into the current process, the final payload is designed to beacon out to both OneDrive API-based C2 server. https://github.com/user-attachments/assets/15f4c8dc-e983-41c5-ba25-96d64e1b9a02