From a24fcfd6f680b583b8ac9c3d9a887bbafdf94751 Mon Sep 17 00:00:00 2001
From: S3N4T0R <121706460+S3N4T0R-0X0@users.noreply.github.com>
Date: Sun, 6 Jul 2025 10:40:35 -0400
Subject: [PATCH] Update README.md

---
 North Koreans APT/Famous Chollima/README.md | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/North Koreans APT/Famous Chollima/README.md b/North Koreans APT/Famous Chollima/README.md
index ddd305a..c108244 100644
--- a/North Koreans APT/Famous Chollima/README.md	
+++ b/North Koreans APT/Famous Chollima/README.md	
@@ -99,7 +99,8 @@ This Python payload creates a reverse TCP shell that connects to a command-and-c
 
 Now i will replace the whoami command with the actual payload inside the JavaScript file and obfuscate it using BEAR-C2.
 
-![Screenshot From 2025-07-06 10-15-16](https://github.com/user-attachments/assets/4c68e039-ba60-4daf-b818-6efd64b3934a)
+![Screenshot From 2025-07-06 10-37-49](https://github.com/user-attachments/assets/6ce771c3-1637-43bb-8486-aabf5bcc55a2)
+
 
 Now I will open the obfuscation tool included in BEAR-C2, select the JavaScript file to obfuscate it, then upload the payload to GitHub and begin the Command and Control operation.