diff --git a/flareon4/challenge4.md b/flareon4/challenge4.md
index d9d6ccb..8f785c2 100644
--- a/flareon4/challenge4.md
+++ b/flareon4/challenge4.md
@@ -18,7 +18,7 @@ The first part of the start function is the biggest hint. It is looking for the
 
 ## Structure ##
 
-![alt text](https://securedorg.github.io/flareon4/images/ch3_diagram.png "diagram")
+![alt text](https://securedorg.github.io/flareon4/images/ch4_diagram.png "diagram")
 
 The binary is actually performing typical malware-like behaviors that I see all the time: