add derusbi

clusters/tool.json

@@ -266,7 +266,19 @@
       }
     },
     {
-      "value": "Derusbi"
+      "value": "Derusbi",
+      "meta": {
+        "synonyms": [
+          "TROJ_DLLSERV.BE"
+          ],
+        "refs": [
+          "http://www.novetta.com/wp-content/uploads/2014/11/Derusbi.pdf",
+          "https://www.rsaconference.com/writable/presentations/file_upload/hta-w02-dissecting-derusbi.pdf"
+        ],
+        "type": [
+          "Backdoor"
+        ]
+      }
     },
     {
       "value": "EvilGrab"
@@ -498,6 +510,7 @@
           "IEChecker"
         ],
         "refs": [
+          "https://www.trendmicro.com/vinfo/us/threat-encyclopedia/malware/troj_sasfis.tl",
           "https://www2.fireeye.com/rs/848-DID-242/images/APT28-Center-of-Storm-2017.pdf"
         ],
         "type": [