addresses https://github.com/MISP/misp-galaxy/pull/751#issuecomment-1217680586

clusters/tool.json

@@ -8484,7 +8484,33 @@
       },
       "uuid": "f43a3828-a3b6-11ec-80e1-55a8e5815c2c",
       "value": "BadPotato"
+    },
+    {
+      "description": "A simple RAT used by Vicious Panda",
+      "meta": {
+        "refs": [
+          "https://securelist.com/microcin-is-here/97353",
+          "https://securelist.com/a-simple-example-of-a-complex-cyberattack/82636",
+          "https://decoded.avast.io/luigicamastra/apt-group-planted-backdoors-targeting-high-profile-networks-in-central-asia",
+          "https://www.welivesecurity.com/2020/05/14/mikroceen-spying-backdoor-high-profile-networks-central-asia",
+          "https://research.checkpoint.com/2020/vicious-panda-the-covid-campaign"
+        ],
+        "synonyms": [
+          "Mikroceen"
+        ],
+        "type": [
+          "RAT"
+        ]
+      },
+      "related": [
+        {
+          "dest-uuid": "68d8c25b-8595-4c20-a5c7-a11a2a34b717",
+          "type": "used-by"
         }
       ],
-  "version": 150
+      "uuid": "7d17dabf-a68e-4eda-a18f-26868ced8e73",
+      "value": "Microcin"
+    }
+  ],
+  "version": 151
 }