From 5d2e4ea11edba13c7bd37bd4de9764fa1e0051eb Mon Sep 17 00:00:00 2001
From: S3N4T0R <121706460+S3N4T0R-0X0@users.noreply.github.com>
Date: Mon, 30 Dec 2024 01:58:41 -0500
Subject: [PATCH] Update README.md

---
 Chinese APT/Wicked Panda/README.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/Chinese APT/Wicked Panda/README.md b/Chinese APT/Wicked Panda/README.md
index d4242af..10aee34 100644
--- a/Chinese APT/Wicked Panda/README.md	
+++ b/Chinese APT/Wicked Panda/README.md	
@@ -138,6 +138,10 @@ After that, we will go to the Certificates & secrets menu to generate the Secret
 
 ## Final result: payload connect to OneDrive By using BEAR-C2
 
+![Screenshot From 2024-12-30 01-55-36](https://github.com/user-attachments/assets/84af56a2-19c3-4eaa-a805-ad790a0c5143)
+
+
+The final step in this process involves the execution of the final payload. After being decrypted and loaded into the current process, the final payload is designed to beacon out to both OneDrive API-based C2 server.
 
 https://github.com/user-attachments/assets/15f4c8dc-e983-41c5-ba25-96d64e1b9a02