diff --git a/Iran/APT/Muddywater/2020-07-02/Pictures/AgentJan2020/DiskInfos.png b/Iran/APT/Muddywater/2020-07-02/Pictures/AgentJan2020/DiskInfos.png new file mode 100644 index 0000000..b4f5521 Binary files /dev/null and b/Iran/APT/Muddywater/2020-07-02/Pictures/AgentJan2020/DiskInfos.png differ diff --git a/Iran/APT/Muddywater/2020-07-02/Pictures/AgentJan2020/DllRegisterServer.png b/Iran/APT/Muddywater/2020-07-02/Pictures/AgentJan2020/DllRegisterServer.png new file mode 100644 index 0000000..375aca8 Binary files /dev/null and b/Iran/APT/Muddywater/2020-07-02/Pictures/AgentJan2020/DllRegisterServer.png differ diff --git a/Iran/APT/Muddywater/2020-07-02/Pictures/AgentJan2020/GetDiskSInfos.png b/Iran/APT/Muddywater/2020-07-02/Pictures/AgentJan2020/GetDiskSInfos.png new file mode 100644 index 0000000..4f5f4f1 Binary files /dev/null and b/Iran/APT/Muddywater/2020-07-02/Pictures/AgentJan2020/GetDiskSInfos.png differ diff --git a/Iran/APT/Muddywater/2020-07-02/Pictures/AgentJan2020/SendDataToC2.png b/Iran/APT/Muddywater/2020-07-02/Pictures/AgentJan2020/SendDataToC2.png new file mode 100644 index 0000000..b2b0e66 Binary files /dev/null and b/Iran/APT/Muddywater/2020-07-02/Pictures/AgentJan2020/SendDataToC2.png differ diff --git a/Iran/APT/Muddywater/2020-07-02/Pictures/AgentJune2020/ExecuteActions.png b/Iran/APT/Muddywater/2020-07-02/Pictures/AgentJune2020/ExecuteActions.png new file mode 100644 index 0000000..2becaf9 Binary files /dev/null and b/Iran/APT/Muddywater/2020-07-02/Pictures/AgentJune2020/ExecuteActions.png differ diff --git a/Iran/APT/Muddywater/2020-07-02/Pictures/AgentJune2020/Obfus.png b/Iran/APT/Muddywater/2020-07-02/Pictures/AgentJune2020/Obfus.png new file mode 100644 index 0000000..596d48a Binary files /dev/null and b/Iran/APT/Muddywater/2020-07-02/Pictures/AgentJune2020/Obfus.png differ diff --git a/Iran/APT/Muddywater/2020-07-02/Pictures/AgentJune2020/PowerRef.png b/Iran/APT/Muddywater/2020-07-02/Pictures/AgentJune2020/PowerRef.png new file mode 100644 index 0000000..2c50ed7 Binary files /dev/null and b/Iran/APT/Muddywater/2020-07-02/Pictures/AgentJune2020/PowerRef.png differ diff --git a/Iran/APT/Muddywater/2020-07-02/Pictures/AgentJune2020/PowershellRunner.png b/Iran/APT/Muddywater/2020-07-02/Pictures/AgentJune2020/PowershellRunner.png new file mode 100644 index 0000000..653675d Binary files /dev/null and b/Iran/APT/Muddywater/2020-07-02/Pictures/AgentJune2020/PowershellRunner.png differ diff --git a/Iran/APT/Muddywater/2020-07-02/Pictures/Comp.png b/Iran/APT/Muddywater/2020-07-02/Pictures/Comp.png new file mode 100644 index 0000000..41f46c7 Binary files /dev/null and b/Iran/APT/Muddywater/2020-07-02/Pictures/Comp.png differ diff --git a/Iran/APT/Muddywater/2020-07-02/Pictures/CyberKill.png b/Iran/APT/Muddywater/2020-07-02/Pictures/CyberKill.png new file mode 100644 index 0000000..6698b55 Binary files /dev/null and b/Iran/APT/Muddywater/2020-07-02/Pictures/CyberKill.png differ diff --git a/Iran/APT/Muddywater/2020-07-02/Pictures/Muddy.png b/Iran/APT/Muddywater/2020-07-02/Pictures/Muddy.png new file mode 100644 index 0000000..c617835 Binary files /dev/null and b/Iran/APT/Muddywater/2020-07-02/Pictures/Muddy.png differ diff --git a/Iran/APT/Muddywater/2020-07-02/Pictures/NSIS/Exec.png b/Iran/APT/Muddywater/2020-07-02/Pictures/NSIS/Exec.png new file mode 100644 index 0000000..9208a19 Binary files /dev/null and b/Iran/APT/Muddywater/2020-07-02/Pictures/NSIS/Exec.png differ diff --git a/Iran/APT/Muddywater/2020-07-02/Pictures/NSIS/LoadExec.png b/Iran/APT/Muddywater/2020-07-02/Pictures/NSIS/LoadExec.png new file mode 100644 index 0000000..1d52f12 Binary files /dev/null and b/Iran/APT/Muddywater/2020-07-02/Pictures/NSIS/LoadExec.png differ diff --git a/Iran/APT/Muddywater/2020-07-02/Pictures/NSIS/entry0.png b/Iran/APT/Muddywater/2020-07-02/Pictures/NSIS/entry0.png new file mode 100644 index 0000000..a436eea Binary files /dev/null and b/Iran/APT/Muddywater/2020-07-02/Pictures/NSIS/entry0.png differ diff --git a/Iran/APT/Muddywater/2020-07-02/Pictures/Timestamp.png b/Iran/APT/Muddywater/2020-07-02/Pictures/Timestamp.png new file mode 100644 index 0000000..b897f21 Binary files /dev/null and b/Iran/APT/Muddywater/2020-07-02/Pictures/Timestamp.png differ