General

  • Target

    Ryxz.rar

  • Size

    2.8MB

  • MD5

    caa6771f8797f33e23c34e299b2ad6c9

  • SHA1

    fbf3789fdd8068d92cf194bd9ff40923417076f9

  • SHA256

    465e834f699086bcaf2f1976e16ad9de43a0b1986d009d019c9d6c8688c3dfd2

  • SHA512

    2dfc2d46a221acf9d1daadd84f0797c7cfa5396410b97d0079878fc1af4ac198267b3875bd755795e804165a615c2c77b43e9c1059da1b3cba051fef4be1d9cb

  • SSDEEP

    49152:KhTvpiLYgIQVinYzM3ZB8XTOrO1ij6Uid2/axnaOi9ZmFUUrWJzBKQ:4iYg8qMzKbAsDBaO0mbWJzx

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • Ryxz.rar
    .rar
  • Ryxz/Cryptolens.Licensing.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Ryxz/Loader.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • Ryxz/Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Ryxz/Newtonsoft.Json.xml
    .xml
  • Ryxz/RyxzAPI.dll
    .dll windows:6 windows x64 arch:x64

    4a96811d04bb5411de238a4f687ddf0d


    Headers

    Imports

    Exports

    Sections

  • Ryxz/key.txt
  • Ryxz/libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    680b5c239d82da8e527bf24b921948fd


    Headers

    Imports

    Exports

    Sections

  • Ryxz/libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    1dedd757946c1ca3c32f97146f7a6c25


    Headers

    Imports

    Exports

    Sections

  • Ryxz/runtimes/win-arm64/native/WebView2Loader.dll
  • Ryxz/runtimes/win-x64/native/WebView2Loader.dll
    .dll windows:10 windows x64 arch:x64

    f6946d311bccc86e2042a388e375de41


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Ryxz/runtimes/win-x86/native/WebView2Loader.dll
    .dll windows:10 windows x86 arch:x86

    72229ff546c74d09d9030ca49ce61b31


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Ryxz/workspace/.tests/appendfile.txt
  • Ryxz/workspace/.tests/getcustomasset.txt
  • Ryxz/workspace/.tests/isfile.txt
  • Ryxz/workspace/.tests/listfiles/test_1.txt
  • Ryxz/workspace/.tests/listfiles/test_2.txt
  • Ryxz/workspace/.tests/loadfile.txt
  • Ryxz/workspace/.tests/readfile.txt
  • Ryxz/workspace/.tests/writefile
  • Ryxz/workspace/.tests/writefile.txt
  • Ryxz/workspace/IY_FE.iy
  • Ryxz/workspace/SimpleSpy/Settings.json
  • Ryxz/workspace/VHS/vhsv5.rfld
  • Ryxz/workspace/dex/deps_version.dat
  • Ryxz/workspace/dex/rbx_api.dat
  • Ryxz/workspace/dex/rbx_rmd.dat
  • Ryxz/xxhash.dll
    .dll windows:6 windows x64 arch:x64

    fba6b233846a2ea5e6907e23b2de9a26


    Headers

    Imports

    Exports

    Sections

  • Ryxz/zstd.dll
    .dll windows:6 windows x64 arch:x64

    f32e8587cacdf9095c309b87f2877ebb


    Headers

    Imports

    Exports

    Sections