General

  • Target

    Ryxz.rar

  • Size

    3.0MB

  • MD5

    7027bf47fd81cfbc6b08e96d98ae5de9

  • SHA1

    490fc73ef0410ab36ac94715e40bfcdac815fa52

  • SHA256

    0bd726908721fcea3a97736c70d35f6681f95c57a3ae2904d5a8af41cf18ff75

  • SHA512

    6f8cae6c6e957e23cd1c168ed185ffeb960fbe2a44ac80afa821575bea4737ee3149639703b072f4366b01462c88ff4a72980608291f358d255d45b748856a66

  • SSDEEP

    49152:ahTvpiLYgIQVinYzM3ZB8XTOrO1ij6Uid2/axnaOi9ZmFbvKNUrW7zBKL:IiYg8qMzKbAsDBaO0mJZW7zU

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • Ryxz.rar
    .rar
  • Ryxz/Cryptolens.Licensing.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Ryxz/Loader.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • Ryxz/Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Ryxz/Newtonsoft.Json.xml
    .xml
  • Ryxz/RyxzAPI.dll
    .dll windows:6 windows x64 arch:x64

    4a96811d04bb5411de238a4f687ddf0d


    Headers

    Imports

    Exports

    Sections

  • Ryxz/libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    680b5c239d82da8e527bf24b921948fd


    Headers

    Imports

    Exports

    Sections

  • Ryxz/libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    1dedd757946c1ca3c32f97146f7a6c25


    Headers

    Imports

    Exports

    Sections

  • Ryxz/runtimes/win-arm64/native/WebView2Loader.dll
  • Ryxz/runtimes/win-x64/native/WebView2Loader.dll
    .dll windows:10 windows x64 arch:x64

    f6946d311bccc86e2042a388e375de41


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Ryxz/runtimes/win-x86/native/WebView2Loader.dll
    .dll windows:10 windows x86 arch:x86

    72229ff546c74d09d9030ca49ce61b31


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Ryxz/scripts/Dex.lua
    .js
  • Ryxz/scripts/Infinite Yield.lua
    .js
  • Ryxz/scripts/Sine Wave.lua
  • Ryxz/scripts/Spinning Donut.lua
  • Ryxz/scripts/UNCCheckEnv.lua
    .js
  • Ryxz/workspace/.tests/appendfile.txt
  • Ryxz/workspace/.tests/getcustomasset.txt
  • Ryxz/workspace/.tests/isfile.txt
  • Ryxz/workspace/.tests/listfiles/test_1.txt
  • Ryxz/workspace/.tests/listfiles/test_2.txt
  • Ryxz/workspace/.tests/loadfile.txt
  • Ryxz/workspace/.tests/readfile.txt
  • Ryxz/workspace/.tests/writefile
  • Ryxz/workspace/.tests/writefile.txt
  • Ryxz/workspace/IY_FE.iy
  • Ryxz/workspace/SimpleSpy/Settings.json
  • Ryxz/workspace/VHS/vhsv5.rfld
  • Ryxz/workspace/dex/deps_version.dat
  • Ryxz/workspace/dex/rbx_api.dat
  • Ryxz/workspace/dex/rbx_rmd.dat
  • Ryxz/xxhash.dll
    .dll windows:6 windows x64 arch:x64

    fba6b233846a2ea5e6907e23b2de9a26


    Headers

    Imports

    Exports

    Sections

  • Ryxz/zstd.dll
    .dll windows:6 windows x64 arch:x64

    f32e8587cacdf9095c309b87f2877ebb


    Headers

    Imports

    Exports

    Sections