From 95a70d09a5a49af660dfaab029ec50bad5df8042 Mon Sep 17 00:00:00 2001
From: Thomas Dupuy <thom4s.d@gmail.com>
Date: Tue, 12 Feb 2019 12:19:23 -0500
Subject: [PATCH] add ANEL/UPPERCUT in tool cluster

---
 clusters/tool.json | 16 +++++++++++++++-
 1 file changed, 15 insertions(+), 1 deletion(-)

diff --git a/clusters/tool.json b/clusters/tool.json
index f27cca8..16c05e6 100644
--- a/clusters/tool.json
+++ b/clusters/tool.json
@@ -7509,7 +7509,21 @@
       },
       "uuid": "0147c0fd-ed74-4d38-a823-130542d894a3",
       "value": "OSX.BadWord"
+    },
+    {
+      "description":"Backdoor",
+      "meta": {
+        "refs": [
+          "https://blog.trendmicro.com/trendlabs-security-intelligence/chessmaster-adds-updated-tools-to-its-arsenal/",
+          "https://www.fireeye.com/blog/threat-research/2018/09/apt10-targeting-japanese-corporations-using-updated-ttps.html"
+        ],
+        "synonyms": [
+          "UPPERCUT"
+        ]
+      },
+      "uuid": "588b97ff-3434-4aa1-a5fd-815e1bb0178b",
+      "value": "ANEL"
     }
   ],
-  "version": 108
+  "version": 109
 }