From 7265af66128a5041fa81257477045a41069d4a4b Mon Sep 17 00:00:00 2001
From: Thanat0s <thanspam@trollprod.org>
Date: Fri, 24 Feb 2017 16:24:59 +0100
Subject: [PATCH] go 4 string

---
 clusters/tool.json | 57 +++++++++++-----------------------------------
 1 file changed, 13 insertions(+), 44 deletions(-)

diff --git a/clusters/tool.json b/clusters/tool.json
index d4e8413..c59b455 100644
--- a/clusters/tool.json
+++ b/clusters/tool.json
@@ -14,9 +14,7 @@
                     "Korplug", 
                     "Agent.dhwf" 
                 ],
-                "type" : [ 
-                    "rat"
-                ]
+                "type" : "rat" 
             }
         }, 
         {
@@ -26,9 +24,7 @@
                 "refs" : [ 
                     "https://www.zscaler.com/pdf/whitepapers/msupdater_trojan_whitepaper.pdfx"
                 ],
-                "type" : [ 
-                    "rat"
-                ]
+                "type" : "rat" 
             }
         }, 
         {
@@ -38,9 +34,7 @@
                 "refs" : [ 
                     "https://github.com/AlessandroZ/LaZagne"
                 ],
-                "type" : [ 
-                    "tool"
-                ]
+                "type" : "tool"
             }
         }, 
         {
@@ -55,9 +49,7 @@
                     "Backdoor.Win32.PoisonIvy", 
                     "Gen:Trojan.Heur.PT"
                 ],
-                "type" : [ 
-                    "rat"
-                ]
+                "type" : "rat"
             }
         }, 
         {
@@ -67,9 +59,7 @@
                 "refs" : [ 
                     "http://researchcenter.paloaltonetworks.com/2016/04/unit42-new-poison-ivy-rat-variant-targets-hong-kong-pro-democracy-activists/"
                 ],
-                "type" : [ 
-                    "rat"
-                ]
+                "type" :"rat"
             }
         }, 
         {
@@ -81,9 +71,7 @@
                 "synonyms" : [ 
                     "Anchor Panda"
                 ],
-                "type" : [ 
-                    "rat"
-                ]
+                "type":  "rat"
             }
         }, 
         {
@@ -113,9 +101,7 @@
                     "Trojan.Win32.Staser.ytq", 
                     "Win32/Zegost.BW"
                 ],
-                "type" : [ 
-                    "rat"
-                ]
+                "type" : "rat"
             }
         }, 
         {
@@ -128,10 +114,7 @@
                 "synonyms" : [ 
                     "Elise"
                 ],
-                "type" : [ 
-                    "dropper", 
-                    "stealer"
-                ]
+                "type" : "dropper, stealer"
             }
         }, 
         {
@@ -144,10 +127,7 @@
                 "synonyms" : [ 
                     "Laziok"
                 ],
-                "type" : [ 
-                    "stealer", 
-                    "reco"
-                ]
+                "type" : "stealer ,reco"
             }
         }, 
         {
@@ -163,10 +143,7 @@
                     "Bankosy", 
                     "Acecard"
                 ],
-                "type" : [ 
-                    "spyware", 
-                    "android"
-                ]
+                "type" : "spyware, android"
             }
         }, 
         {
@@ -184,11 +161,7 @@
             "PWOPyExec",
             "PWOQuery"
         ],
-        "type" : [
-            "dropper",
-            "coinminer",
-            "spyware"
-        ]
+        "type" : "dropper, coinminer, spyware"
       }
     },
     {
@@ -202,9 +175,7 @@
         "refs": [
           "http://blog.trendmicro.com/trendlabs-security-intelligence/lost-door-rat-accessible-customizable-attack-tool/"
         ],
-        "type": [
-            "rat"
-        ]
+        "type": "rat"
       }
     },
     {
@@ -217,9 +188,7 @@
         "refs": [
           "http://www.fidelissecurity.com/files/files/FTA_1009-njRAT_Uncovered_rev2.pdf"
         ],
-        "type": [
-            "rat"
-        ]
+        "type": "rat"
       }
     },
     {