USERNAME: SysRoot
PASSWORD: 87432

Written in Visual Basic

more versions

Server:
dropped files:
C:\WINDOWS\TAPI32.exe 
C:\WINDOWS\SYSTEM\TAPI32.exe 

size: 72 KB

port: 8734 TCP

startup:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run