Server:
dropped file:
C:\WINDOWS\SYSTEM\netdd.exe 

size: 25 KB

port: 31339 TCP
      31339 UDP
	  
startup:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run