diff --git a/North Korea/APT/Lazarus/23-10-19/Analysis/27-10-19/mal_deletekey.png b/North Korea/APT/Lazarus/23-10-19/Analysis/27-10-19/mal_deletekey.png
new file mode 100644
index 0000000..6631435
Binary files /dev/null and b/North Korea/APT/Lazarus/23-10-19/Analysis/27-10-19/mal_deletekey.png differ
diff --git a/North Korea/APT/Lazarus/23-10-19/Analysis/27-10-19/mal_disk.png b/North Korea/APT/Lazarus/23-10-19/Analysis/27-10-19/mal_disk.png
new file mode 100644
index 0000000..b65fea0
Binary files /dev/null and b/North Korea/APT/Lazarus/23-10-19/Analysis/27-10-19/mal_disk.png differ
diff --git a/North Korea/APT/Lazarus/23-10-19/Analysis/27-10-19/mal_getimage.png b/North Korea/APT/Lazarus/23-10-19/Analysis/27-10-19/mal_getimage.png
new file mode 100644
index 0000000..2f01ba9
Binary files /dev/null and b/North Korea/APT/Lazarus/23-10-19/Analysis/27-10-19/mal_getimage.png differ
diff --git a/North Korea/APT/Lazarus/23-10-19/Analysis/27-10-19/mal_getinfos.png b/North Korea/APT/Lazarus/23-10-19/Analysis/27-10-19/mal_getinfos.png
new file mode 100644
index 0000000..a1fef2a
Binary files /dev/null and b/North Korea/APT/Lazarus/23-10-19/Analysis/27-10-19/mal_getinfos.png differ
diff --git a/North Korea/APT/Lazarus/23-10-19/Analysis/27-10-19/mal_getscreenshot.png b/North Korea/APT/Lazarus/23-10-19/Analysis/27-10-19/mal_getscreenshot.png
new file mode 100644
index 0000000..0f9bc0b
Binary files /dev/null and b/North Korea/APT/Lazarus/23-10-19/Analysis/27-10-19/mal_getscreenshot.png differ
diff --git a/North Korea/APT/Lazarus/23-10-19/Analysis/27-10-19/mal_keyboard.png b/North Korea/APT/Lazarus/23-10-19/Analysis/27-10-19/mal_keyboard.png
new file mode 100644
index 0000000..aa831b0
Binary files /dev/null and b/North Korea/APT/Lazarus/23-10-19/Analysis/27-10-19/mal_keyboard.png differ
diff --git a/North Korea/APT/Lazarus/23-10-19/Analysis/27-10-19/mal_process.png b/North Korea/APT/Lazarus/23-10-19/Analysis/27-10-19/mal_process.png
new file mode 100644
index 0000000..4fb98e7
Binary files /dev/null and b/North Korea/APT/Lazarus/23-10-19/Analysis/27-10-19/mal_process.png differ
diff --git a/North Korea/APT/Lazarus/23-10-19/Analysis/27-10-19/mal_pushkey.png b/North Korea/APT/Lazarus/23-10-19/Analysis/27-10-19/mal_pushkey.png
new file mode 100644
index 0000000..e688696
Binary files /dev/null and b/North Korea/APT/Lazarus/23-10-19/Analysis/27-10-19/mal_pushkey.png differ
diff --git a/North Korea/APT/Lazarus/23-10-19/Analysis/27-10-19/mal_pushpersistence.png b/North Korea/APT/Lazarus/23-10-19/Analysis/27-10-19/mal_pushpersistence.png
new file mode 100644
index 0000000..e52d3d7
Binary files /dev/null and b/North Korea/APT/Lazarus/23-10-19/Analysis/27-10-19/mal_pushpersistence.png differ
diff --git a/North Korea/APT/Lazarus/23-10-19/Analysis/27-10-19/mal_systeminfos.png b/North Korea/APT/Lazarus/23-10-19/Analysis/27-10-19/mal_systeminfos.png
new file mode 100644
index 0000000..c16f360
Binary files /dev/null and b/North Korea/APT/Lazarus/23-10-19/Analysis/27-10-19/mal_systeminfos.png differ
diff --git a/North Korea/APT/Lazarus/23-10-19/Analysis/27-10-19/mal_writeKey.PNG b/North Korea/APT/Lazarus/23-10-19/Analysis/27-10-19/mal_writeKey.PNG
new file mode 100644
index 0000000..a443845
Binary files /dev/null and b/North Korea/APT/Lazarus/23-10-19/Analysis/27-10-19/mal_writeKey.PNG differ