From d554b3123bf030bc90578f103646c84f92287d19 Mon Sep 17 00:00:00 2001
From: S3N4T0R <121706460+S3N4T0R-0X0@users.noreply.github.com>
Date: Sun, 27 Jul 2025 15:58:31 -0400
Subject: [PATCH] Update README.md

---
 North Koreans APT/Stardust Chollima/README.md | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/North Koreans APT/Stardust Chollima/README.md b/North Koreans APT/Stardust Chollima/README.md
index 276c430..d4d3fb5 100644
--- a/North Koreans APT/Stardust Chollima/README.md	
+++ b/North Koreans APT/Stardust Chollima/README.md	
@@ -36,6 +36,11 @@ persistence by setting an autostart .
 4. C&C server on HTTPS: When a command is received, it is executed using the PowerShell command in Windows.
 The output of the command is captured and sent back to the C2 server.
 
+<img width="640" height="486" alt="NK_PIRsV2" src="https://github.com/user-attachments/assets/719f42c1-320f-44b8-ab40-376f4a886fae" />
+
+
+
+
 ## The first stage (social engineering technique)