Resolved sagagame.me to 18.104.22.168
Gate file: /game/order.php
The domain was only registered on the 20th. Not very good at hiding their botnet.
Hosting info: http://whois.domaintools.com/22.214.171.124
Related md5s (Download sample from Malwr.com)
Anonymous - November 21, 2013 at 7:52 pm
where the hell is Pig come back home and be hidden daddy misses yew