Resolved seosaw.pw to 188.138.125.103
Server: seosaw.pw
Gate file: /wq782jwoqkQy19qkdh27hqudqj/order.php
Alternate domains:
microsoftgo.pw
updateom.info
seosaw.info
googlerw.info
Downloads what looks like Sefnit from
hxxp://now.googlefast.pw/remote/index.php?u=48&istan
Hosting info: http://whois.domaintools.com/188.138.125.103
Related md5s (Download sample from Malwr.com
Betabot: daee8c5056fbbf1964588e70cb371fae
Sefnit: b99ed8704716ab6ff273e3dc66fe3cfb