diff --git a/clusters/tool.json b/clusters/tool.json
index f474d8c0..ed82b3dc 100644
--- a/clusters/tool.json
+++ b/clusters/tool.json
@@ -338,7 +338,21 @@
       }
     },
     {
-      "value": "Backdoor.Moudoor"
+      "value": "Moudoor",
+      "description": "Backdoor.Moudoor, a customized version of Gh0st RAT",
+      "meta": {
+        "synonyms": [
+          "SCAR",
+          "KillProc.14145"
+        ],
+        "refs": [
+          "http://www.darkreading.com/attacks-breaches/elite-chinese-cyberspy-group-behind-bit9-hack/d/d-id/1140495",
+          "https://securityledger.com/2013/09/apt-for-hire-symantec-outs-hidden-lynx-hacking-crew/"
+        ],
+        "type": [
+          "Backdoor"
+        ]
+      }
     },
     {
       "value": "NetTraveler"