diff --git a/clusters/ransomware.json b/clusters/ransomware.json
index e2ce520..f5ca550 100644
--- a/clusters/ransomware.json
+++ b/clusters/ransomware.json
@@ -13503,7 +13503,23 @@
       },
       "uuid": "6cea5549-1d1b-111a-309f-012d671360b1",
       "value": "Hildacrypt"
+    },
+    {
+      "description": "Mr. Dec ransomware is cryptovirus that was first spotted in mid-May 2018, and since then was updated multiple times. The ransomware encrypts all personal data on the device with the help of AES encryption algorithm and appends .[ID]random 16 characters[ID] file extension, preventing from their further usage.",
+      "meta": {
+        "encryption": "AES",
+        "refs": [
+          "https://www.2-spyware.com/remove-mr-dec-ransomware.html",
+          "https://id-ransomware.blogspot.com/2018/05/mrdec-ransomware.html"
+        ],
+        "synonyms": [
+          "MrDec",
+          "Sherminator"
+        ]
+      },
+      "uuid": "7cea4438-1d1c-121a-30af-011d661260b2",
+      "value": "Mr.Dec"
     }
   ],
-  "version": 67
+  "version": 68
 }