From 0cfc8907f3ac42ec48f32e9f9e224c26cfc9dc55 Mon Sep 17 00:00:00 2001
From: Deborah Servili <deborah.servili@gmail.com>
Date: Fri, 9 Mar 2018 09:25:40 +0100
Subject: [PATCH] add Rotinom

---
 clusters/tool.json | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/clusters/tool.json b/clusters/tool.json
index 2396114..37f2be4 100644
--- a/clusters/tool.json
+++ b/clusters/tool.json
@@ -3736,6 +3736,16 @@
         ]
       },
       "uuid": "3119554e-236e-11e8-ae2e-b7063732fd07"
+    },
+    {
+      "value": "Rotinom",
+      "description":  "W32.Rotinom is a worm that spreads by copying itself to removable drives. ",
+      "meta": {
+        "refs": [
+          "https://www.symantec.com/security_response/writeup.jsp?docid=2011-011117-0057-99"
+        ]
+      },
+      "uuid": "5f4be30a-2373-11e8-bbab-774ff49fd040"
     }
   ]
 }