diff --git a/rules/network/net_wannacry_killswitch_domain.yml b/rules/network/net_wannacry_killswitch_domain.yml
index ed72bead2..ab0f3a46e 100644
--- a/rules/network/net_wannacry_killswitch_domain.yml
+++ b/rules/network/net_wannacry_killswitch_domain.yml
@@ -1,5 +1,5 @@
 title: Wannacry Killswitch Domain
-id: c64c5175-5189-431b-a55e-6d9882158251
+id: 3eaf6218-3bed-4d8a-8707-274096f12a18
 status: experimental
 description: Detects wannacry killswitch domain dns queries
 references: