New SLEEPWALKER Backdoor Waits for One Crafted Packet Then Runs Its Own Bytecode

An independent malware researcher has documented a previously unreported Windows backdoor dubbed SLEEPWALKER that stays inert in memory until a specifically crafted network packet reaches the machine and then runs commands written in a 23instruction language of its own design The sample is an unsigned 64bit Windows dynamiclink library DLL of 59904 bytes built to be sideloaded into