diff --git a/clusters/ransomware.json b/clusters/ransomware.json
index e089c73..361163d 100644
--- a/clusters/ransomware.json
+++ b/clusters/ransomware.json
@@ -23578,12 +23578,6 @@
     },
     {
       "description": "ransomware",
-      "uuid": "201eff54-d41e-4f70-916c-5dfb9301730a",
-      "value": "Conti",
-      "refs": [
-        "https://www.cyber.gov.au/acsc/view-all-content/advisories/2021-010-acsc-ransomware-profile-conti",
-        ""
-      ],
       "meta": {
         "attribution-confidence": "100",
         "country": "RU",
@@ -23593,7 +23587,13 @@
         "ransomnotes": [
           "All of your files are currently encrypted by CONTI ransomware."
         ]
-      }
+      },
+      "refs": [
+        "https://www.cyber.gov.au/acsc/view-all-content/advisories/2021-010-acsc-ransomware-profile-conti",
+        ""
+      ],
+      "uuid": "201eff54-d41e-4f70-916c-5dfb9301730a",
+      "value": "Conti"
     },
     {
       "description": "ransomware",