Posted in Marcus Hutchen’s server (WannaCry Killer anyone?)
On VT: http://184.108.40.206/yeswemaf (Telegram channel to collect logs).
The domain is typo squatted to ensure people download the malware without questioning. Why would you use Github to host your game is beyond me. With this being said I’ve flagged the domain, IP and Telegram server to the proper companies/groups