I have not tested this myself, but I guess making your dictionary bigger would help to make it less of a bottleneck.
You can first add one ?b to your dictionary, then add the rest.
For example
.\hashcat -a7 --stdout ?b iv.bin > b_iv.bin
.\hashcat -m 33501 -a 7 -w 3 '$rc4$72$256$2b006*****8c80$0$*****99f8ce60e' ?b?b?b?b b_iv.bin
Let us know if that works.
Also try if you can run with '-S', for slow candidates. If I remember correctly, '-S' is not allowed for for hybrid attacks but that is always something to try when your attack is slower than expected.
You can first add one ?b to your dictionary, then add the rest.
For example
.\hashcat -a7 --stdout ?b iv.bin > b_iv.bin
.\hashcat -m 33501 -a 7 -w 3 '$rc4$72$256$2b006*****8c80$0$*****99f8ce60e' ?b?b?b?b b_iv.bin
Let us know if that works.
Also try if you can run with '-S', for slow candidates. If I remember correctly, '-S' is not allowed for for hybrid attacks but that is always something to try when your attack is slower than expected.