diff --git a/conf/maldb.db b/conf/maldb.db
index 9053108..be35d41 100644
Binary files a/conf/maldb.db and b/conf/maldb.db differ
diff --git a/malware/Binaries/Ransomware.XData/Ransomware.XData.md5 b/malware/Binaries/Ransomware.XData/Ransomware.XData.md5
new file mode 100644
index 0000000..73c7363
--- /dev/null
+++ b/malware/Binaries/Ransomware.XData/Ransomware.XData.md5
@@ -0,0 +1,2 @@
+MD5 (Ransom.Xdata.exe) = 254b7d11098dc01e5194e841d887c322
+MD5 (Ransom (17.06.05) .exe) = 0bd2a86516a4ebcc88f37f77dc618a0b
\ No newline at end of file
diff --git a/malware/Binaries/Ransomware.XData/Ransomware.XData.pass b/malware/Binaries/Ransomware.XData/Ransomware.XData.pass
new file mode 100644
index 0000000..ba701bf
--- /dev/null
+++ b/malware/Binaries/Ransomware.XData/Ransomware.XData.pass
@@ -0,0 +1 @@
+infected
diff --git a/malware/Binaries/Ransomware.XData/Ransomware.XData.sha256 b/malware/Binaries/Ransomware.XData/Ransomware.XData.sha256
new file mode 100644
index 0000000..f9fa9bc
--- /dev/null
+++ b/malware/Binaries/Ransomware.XData/Ransomware.XData.sha256
@@ -0,0 +1,2 @@
+f0103528b96533db9d76df0f760b4d0ffc1a142b0070e3a70e6f9a724d726fbd  Ransom.Xdata.exe
+dcf5da82c4785d8cca8f4d4478bebbf4ff7af25e584ee6fe86e8ce65363ff28c Ransom (17.06.05) .exe
\ No newline at end of file
diff --git a/malware/Binaries/Ransomware.XData/Ransomware.XData.zip b/malware/Binaries/Ransomware.XData/Ransomware.XData.zip
new file mode 100644
index 0000000..67753c9
Binary files /dev/null and b/malware/Binaries/Ransomware.XData/Ransomware.XData.zip differ