From 51e27f6ee30f177e1f01e1f8cdace10577988b59 Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Thu, 24 Mar 2016 07:45:36 +0100
Subject: [PATCH] Snifula added

---
 elements/threat-actor-tools.json | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/elements/threat-actor-tools.json b/elements/threat-actor-tools.json
index e5f50bd..c06e155 100644
--- a/elements/threat-actor-tools.json
+++ b/elements/threat-actor-tools.json
@@ -354,6 +354,11 @@
     {
       "value": "Elirks"
     },
+    {
+      "value": "Snifula",
+      "synonyms": ["Ursnif"]
+      "refs": ["https://www.circl.lu/pub/tr-13/"]
+    },
     {
       "value": "Aumlib",
       "synonyms": ["Yayih", "mswab", "Graftor"],