Executable file shows backdoor behavior in sandbox (process injection, connection to external IP 23.32.75.10)