diff --git a/internal-enrichment/reversinglabs-malware-presence/src/main.py b/internal-enrichment/reversinglabs-malware-presence/src/main.py
index ae7326c3a5..fa9cc2cc9b 100644
--- a/internal-enrichment/reversinglabs-malware-presence/src/main.py
+++ b/internal-enrichment/reversinglabs-malware-presence/src/main.py
@@ -701,9 +701,14 @@ def _check_file_reputation(
 
                 if results["score"] > 50:
                     # Generate indicator from observable with relationships
-                    indicator_pattern = (
-                        f"[file:hashes. '{self.hash_type}' = '{self.hash}']"
-                    )
+                    if self.hash_type == "MD5":
+                        indicator_pattern = (
+                            f"[file:hashes.{self.hash_type} = '{self.hash}']"
+                        )
+                    else:
+                        indicator_pattern = (
+                            f"[file:hashes.'{self.hash_type}' = '{self.hash}']"
+                        )
                     main_observable_type = "File"
                     indicator_name = self.hash
                     self._generate_stix_indicator(