The tactic disabled endpoint defenses as intended, but also accidentally broke the ransomware’s encryption process.