Create dprk_silivaccine.txt
Create dprk_silivaccine.txt

Have doubts on how exactly to detect this case: 1) It's not APT itself, 2) It's not malware itself . So, I propose this as ```suspicious``` one with explicit trail name.
stamparm/maltrail,stamparm/maltrail,stamparm/maltrail,stamparm/maltrail