diff --git a/clusters/ransomware.json b/clusters/ransomware.json
index 68d988e..f253ed9 100644
--- a/clusters/ransomware.json
+++ b/clusters/ransomware.json
@@ -2249,6 +2249,9 @@
         "refs": [
           "https://id-ransomware.blogspot.co.il/2017/01/xcrypt-ransomware.html",
           "https://twitter.com/JakubKroustek/status/825790584971472902"
+        ],
+        "synonyns": [
+          "XCrypt"
         ]
       },
       "uuid": "fd5bb71f-80dc-4a6d-ba8e-ed74999700d3",
@@ -23194,11 +23197,6 @@
       "uuid": "d650da35-7ad7-417a-902a-16ea55bd1126",
       "value": "XRat"
     },
-    {
-      "description": "ransomware",
-      "uuid": "d2843c78-557d-4f95-a0bf-9ab3f1a4e49e",
-      "value": "XCry"
-    },
     {
       "description": "ransomware",
       "uuid": "f5c46d3f-404b-4640-9892-005f845d33a2",