diff --git a/clusters/rat.json b/clusters/rat.json
index 50922a0..cd041ba 100644
--- a/clusters/rat.json
+++ b/clusters/rat.json
@@ -3374,14 +3374,14 @@
       "value": "FlawedAmmy"
     },
     {
-      "value": "Felipe",
       "description": "The Zscaler ThreatLabZ team came across a new strain of infostealer Trojan called Felipe, which silently installs itself onto a user’s system and connects to a command-and-control (C&C) server to send system information from the compromised system. This malware is compiled for both 32-bit and 64-bit Windows operating systems. Felipe basically steals the victim's debit and credit card information and sends it, along with other personal information, to the remote C&C server. It also sets a date and time to perform other malicious activity upon successful infection of the victim machine.",
       "meta": {
         "refs": [
           "https://www.zscaler.com/blogs/research/felipe-new-infostealer-trojan"
         ]
       },
-      "uuid": "0f117f50-9657-11e9-8e2b-83e391e0ce57"
+      "uuid": "0f117f50-9657-11e9-8e2b-83e391e0ce57",
+      "value": "Felipe"
     }
   ],
   "version": 30