diff --git a/malware/wineggdrop.yar b/malware/TOOLKIT_Wineggdrop.yar
similarity index 95%
rename from malware/wineggdrop.yar
rename to malware/TOOLKIT_Wineggdrop.yar
index 0bb6208..7c564fe 100644
--- a/malware/wineggdrop.yar
+++ b/malware/TOOLKIT_Wineggdrop.yar
@@ -1,4 +1,4 @@
-rule wineggdrop : portscanner
+rule wineggdrop : portscanner toolkit
 {
     meta:
         author = "Christian Rebischke (@sh1bumi)"