diff --git a/malware/generic_exe2hex_payload.yar b/malware/TOOLKIT_exe2hex_payload.yar
similarity index 96%
rename from malware/generic_exe2hex_payload.yar
rename to malware/TOOLKIT_exe2hex_payload.yar
index 129f1c5..b063eb3 100644
--- a/malware/generic_exe2hex_payload.yar
+++ b/malware/TOOLKIT_exe2hex_payload.yar
@@ -10,7 +10,7 @@
 	Identifier: Exe2hex
 */
 
-rule Payload_Exe2Hex {
+rule Payload_Exe2Hex : toolkit {
 	meta:
 		description = "Detects payload generated by exe2hex"
 		author = "Florian Roth"