diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index fd06f006..1207015e 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -6377,14 +6377,14 @@
     },
     {
       "description": "ASERT has learned of an APT campaign, possibly originating from DPRK, we are calling STOLEN PENCIL that is targeting academic institutions since at least May 2018.",
-      "value": "STOLEN PENCIL",
-      "uuid": "769aeaa6-d193-4e90-a818-d74c6ff7b845",
       "meta": {
         "refs": [
           "https://asert.arbornetworks.com/stolen-pencil-campaign-targets-academia/",
           "https://unit42.paloaltonetworks.com/new-babyshark-malware-targets-u-s-national-security-think-tanks/"
         ]
-      }
+      },
+      "uuid": "769aeaa6-d193-4e90-a818-d74c6ff7b845",
+      "value": "STOLEN PENCIL"
     }
   ],
   "version": 93