diff --git a/clusters/ransomware.json b/clusters/ransomware.json
index a372450..b74aba3 100644
--- a/clusters/ransomware.json
+++ b/clusters/ransomware.json
@@ -5300,7 +5300,8 @@
           ".XZZX",
           ".TEST",
           ".WORK",
-          ".SYSTEM"
+          ".SYSTEM",
+          ".MOLE66"
         ],
         "ransomnotes": [
           "HELP_YOUR_FILES.html (CryptXXX)",
@@ -5314,7 +5315,8 @@
           "Hello!\n\nAttention! All Your data was encrypted!\n\nFor specific informartion, please send us an email with Your ID number:\n\nxzzx@tuta.io\n\nxzzx1@protonmail.com\n\nxzzx10@yandex.com\n\nxzzx101@yandex.com\n\nPlease send email to all email addresses! We will help You as soon as possible!\n\nDECRYPT-ID-[id] number",
           "Hello!\n\nAttention! All Your data was encrypted!\n\nFor specific informartion, please send us an email with Your ID number:\n\ntest757@tuta.io\n\ntest757@protonmail.com\n\ntest757xz@yandex.com\n\ntest757xy@yandex.com\n\ntest757@consultant.com\n\nPlease send email to all email addresses! We will help You as soon as possible!\n\nIMPORTANT: DO NOT USE ANY PUBLIC SOFTWARE! IT MAY DAMAGE YOUR DATA FOREVER!\n\nDECRYPT-ID-[id] number",
           "Attention! All Your data was encrypted!\n\nFor specific informartion, please send us an email with Your ID number:\n\nworknow@keemail.me\n\nworknow@protonmail.com\n\nworknow8@yandex.com\n\nworknow9@yandex.com\n\nworknow@techie.com\n\nPlease send email to all email addresses! We will help You as soon as possible!\n\nIMPORTANT: DO NOT USE ANY PUBLIC SOFTWARE! IT MAY DAMAGE YOUR DATA FOREVER!\n\nDECRYPT-ID-[id] number",
-          "Hello!\n\nAttention! All Your data was encrypted!\n\nFor specific informartion, please send us an email with Your ID number:\n\nsystemwall@keemail.me\n\nsystemwall@protonmail.com\n\nsystemwall@yandex.com\n\nsystemwall1@yandex.com\n\nemily.w@dr.com\n\nPlease send email to all email addresses! We will help You as soon as possible!\n\nIMPORTANT: DO NOT USE ANY PUBLIC SOFTWARE! IT MAY DAMAGE YOUR DATA FOREVER!\n\nDECRYPT-ID-%s number"
+          "Hello!\n\nAttention! All Your data was encrypted!\n\nFor specific informartion, please send us an email with Your ID number:\n\nsystemwall@keemail.me\n\nsystemwall@protonmail.com\n\nsystemwall@yandex.com\n\nsystemwall1@yandex.com\n\nemily.w@dr.com\n\nPlease send email to all email addresses! We will help You as soon as possible!\n\nIMPORTANT: DO NOT USE ANY PUBLIC SOFTWARE! IT MAY DAMAGE YOUR DATA FOREVER!\n\nDECRYPT-ID-%s number",
+          "!!!All your files are encrypted!!!\nWhat to decipher write on mail alpha2018a@aol.com\nDo not move or delete files!!!!\n---- Your ID: 5338f74a-3c20-4ac0-9deb-f3a91818cea7 ----\n!!! You have 3 days otherwise you will lose all your data.!!!"
         ],
         "refs": [
           "http://www.nyxbone.com/malware/CryptoMix.html",
@@ -5325,7 +5327,8 @@
           "https://www.bleepingcomputer.com/news/security/xzzx-cryptomix-ransomware-variant-released/",
           "https://www.bleepingcomputer.com/news/security/test-cryptomix-ransomware-variant-released/",
           "https://www.bleepingcomputer.com/news/security/work-cryptomix-ransomware-variant-released/",
-          "https://www.bleepingcomputer.com/news/security/system-cryptomix-ransomware-variant-released/"
+          "https://www.bleepingcomputer.com/news/security/system-cryptomix-ransomware-variant-released/",
+          "https://www.bleepingcomputer.com/news/security/mole66-cryptomix-ransomware-variant-released/"
         ]
       },
       "uuid": "c76110ea-15f1-4adf-a28d-c707374dbb3a"