Update ransomware_stopdjvu.py

CAPESandbox · Oct 28, 2024 · a978554 · a978554
1 parent ee3ca89
commit a978554
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/modules/signatures/windows/ransomware_stopdjvu.py b/modules/signatures/windows/ransomware_stopdjvu.py
@@ -17,6 +17,6 @@ def run(self):
         cmdlines = self.results.get("behavior", {}).get("summary", {}).get("executed_commands")
         for cmdline in cmdlines:
             lower = cmdline.lower()
-            if all([pattern in lower for pattern in ("--admin" , "isnottask", "isnotautostart")])
+            if all([pattern in lower for pattern in ("--admin" , "isnottask", "isnotautostart")]):
                 return True
         return False