diff --git a/North Korea/APT/Lazarus/23-10-19/Analysis/march 2019/Mal-Pushdata.png b/North Korea/APT/Lazarus/23-10-19/Analysis/march 2019/Mal-Pushdata.png new file mode 100644 index 0000000..c399c1e Binary files /dev/null and b/North Korea/APT/Lazarus/23-10-19/Analysis/march 2019/Mal-Pushdata.png differ diff --git a/North Korea/APT/Lazarus/23-10-19/Analysis/march 2019/Mal-ReplyDown.png b/North Korea/APT/Lazarus/23-10-19/Analysis/march 2019/Mal-ReplyDown.png new file mode 100644 index 0000000..07d1302 Binary files /dev/null and b/North Korea/APT/Lazarus/23-10-19/Analysis/march 2019/Mal-ReplyDown.png differ diff --git a/North Korea/APT/Lazarus/23-10-19/Analysis/march 2019/Mal-ReplyExec.png b/North Korea/APT/Lazarus/23-10-19/Analysis/march 2019/Mal-ReplyExec.png new file mode 100644 index 0000000..4264be1 Binary files /dev/null and b/North Korea/APT/Lazarus/23-10-19/Analysis/march 2019/Mal-ReplyExec.png differ diff --git a/North Korea/APT/Lazarus/23-10-19/Analysis/march 2019/Mal-ReplyOtherShellCmd.png b/North Korea/APT/Lazarus/23-10-19/Analysis/march 2019/Mal-ReplyOtherShellCmd.png new file mode 100644 index 0000000..2c4ae01 Binary files /dev/null and b/North Korea/APT/Lazarus/23-10-19/Analysis/march 2019/Mal-ReplyOtherShellCmd.png differ diff --git a/North Korea/APT/Lazarus/23-10-19/Analysis/march 2019/Mal-Replycmd.png b/North Korea/APT/Lazarus/23-10-19/Analysis/march 2019/Mal-Replycmd.png new file mode 100644 index 0000000..ea463f3 Binary files /dev/null and b/North Korea/APT/Lazarus/23-10-19/Analysis/march 2019/Mal-Replycmd.png differ diff --git a/North Korea/APT/Lazarus/23-10-19/Analysis/march 2019/Mal-StartSession.png b/North Korea/APT/Lazarus/23-10-19/Analysis/march 2019/Mal-StartSession.png new file mode 100644 index 0000000..2bf4075 Binary files /dev/null and b/North Korea/APT/Lazarus/23-10-19/Analysis/march 2019/Mal-StartSession.png differ diff --git a/North Korea/APT/Lazarus/23-10-19/Analysis/march 2019/Mal-destroysession.png b/North Korea/APT/Lazarus/23-10-19/Analysis/march 2019/Mal-destroysession.png new file mode 100644 index 0000000..37b83c0 Binary files /dev/null and b/North Korea/APT/Lazarus/23-10-19/Analysis/march 2019/Mal-destroysession.png differ diff --git a/North Korea/APT/Lazarus/23-10-19/Analysis/march 2019/Mal-main.png b/North Korea/APT/Lazarus/23-10-19/Analysis/march 2019/Mal-main.png new file mode 100644 index 0000000..d98ec1e Binary files /dev/null and b/North Korea/APT/Lazarus/23-10-19/Analysis/march 2019/Mal-main.png differ diff --git a/North Korea/APT/Lazarus/23-10-19/Analysis/march 2019/Mal-mainloop.png b/North Korea/APT/Lazarus/23-10-19/Analysis/march 2019/Mal-mainloop.png new file mode 100644 index 0000000..1dcbd47 Binary files /dev/null and b/North Korea/APT/Lazarus/23-10-19/Analysis/march 2019/Mal-mainloop.png differ diff --git a/North Korea/APT/Lazarus/23-10-19/Analysis/march 2019/Mal-replydie.png b/North Korea/APT/Lazarus/23-10-19/Analysis/march 2019/Mal-replydie.png new file mode 100644 index 0000000..9f1d34d Binary files /dev/null and b/North Korea/APT/Lazarus/23-10-19/Analysis/march 2019/Mal-replydie.png differ diff --git a/North Korea/APT/Lazarus/23-10-19/Analysis/march 2019/Mal-weboptions.png b/North Korea/APT/Lazarus/23-10-19/Analysis/march 2019/Mal-weboptions.png new file mode 100644 index 0000000..b087d76 Binary files /dev/null and b/North Korea/APT/Lazarus/23-10-19/Analysis/march 2019/Mal-weboptions.png differ diff --git a/North Korea/APT/Lazarus/23-10-19/Analysis/march 2019/Mal-xor.png b/North Korea/APT/Lazarus/23-10-19/Analysis/march 2019/Mal-xor.png new file mode 100644 index 0000000..a0eacde Binary files /dev/null and b/North Korea/APT/Lazarus/23-10-19/Analysis/march 2019/Mal-xor.png differ diff --git a/North Korea/APT/Lazarus/23-10-19/Analysis/march 2019/functionscom.PNG b/North Korea/APT/Lazarus/23-10-19/Analysis/march 2019/functionscom.PNG new file mode 100644 index 0000000..56ce6fd Binary files /dev/null and b/North Korea/APT/Lazarus/23-10-19/Analysis/march 2019/functionscom.PNG differ