URLhaus Database

You are currently viewing the URLhaus database entry for https://natfast.com/wp-content/geeVh/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	765955
URL:	https://natfast.com/wp-content/geeVh/
URL Status:	Offline
Host:	natfast.com
Date added:	2020-10-29 16:25:08 UTC
Last online:	2020-10-30 12:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Blocked
dns0.eu :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2020-10-29 16:26:19 UTC to abuse{at}namecheaphosting[dot]com)
Takedown time:	19 hours, 36 minutes (down since 2020-10-30 12:03:01 UTC)
Tags:	emotet epoch2 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-10-30	XFKOP.exe	exe	a5d7ccfb32cdfb67000c95465ec7676b85307fa9d534dca75121d0be0e139f24	n/a	Heodo
2020-10-30	2VEySh0E7eOpsr.exe	exe	34eac099acd8cead8103f35e1446913d602ff7ee2b12aabd691cec3d760a95bd	n/a	Heodo
2020-10-30	ElWcdLF3tDAZCZ5NUs7.exe	exe	888741f6a2fdd29176aba41b144e8a711f34ef69100d17ef84845b2e3edbc0f0	n/a	Heodo
2020-10-30	o6xCmZTcGBw.exe	exe	77de76a6a5f054a3b27fb9b81b5d91fea03cac89c210e0364ca77417c71ef936	12.50%	Heodo
2020-10-30	ZQcyPS.exe	exe	72db1361bc043edd2a9f7e1900a969738b7f010634dff21d97094ed0db4bf6d6	n/a	Heodo
2020-10-30	R9O6o6ttm5zxY.exe	exe	ba5902f8b84aafa17ad57cfd8546863f3e1ef0f1a436fd6bb3121cfe4f090e75	n/a	Heodo
2020-10-30	EMsnXdm.exe	exe	0907ba734a79b45a14b7c3e962679fa5781b346f24a02e9c206081778093e4ab	44.44%	Heodo
2020-10-30	C571JWXYsAvqnKXDhs.exe	exe	e549925022ea09f5ffc0a804c6d85dfd18a5ae8fd58dd5e8f15225de5073ad86	42.86%	Heodo
2020-10-30	FESyeacDLAH.exe	exe	361232fb555da6211f0a7473a4ca3b6ba6c690a9d2a8c4dfd72c622183653d7a	n/a	Heodo
2020-10-30	vCk7Y.exe	exe	dfe07c5987c001dbfc0ab9540b40df8324b62ca8caca48d9d19ac718eef369af	n/a	Heodo
2020-10-30	dsuK.exe	exe	0b666f6b4adc8723ebf740970bd52823090efaaffd96fbf108d430c21726beeb	n/a	Heodo
2020-10-30	Ja55ehpF7baZM.exe	exe	33fafe05cc0eb79364608e68562c3a1533c7b4f5b66ba2e572ee33c745662eda	n/a	Heodo
2020-10-30	cHifgJOERlHezyt.exe	exe	104a9fee14121ecf0745a946eadbc423e75c0306d55269088021cd619b87a1c2	n/a	Heodo
2020-10-30	Rmne4J92SA963uoCKr.exe	exe	9dee52a302a61aeef25fc3bbc407014622296f5cb549f824257bae8a631b339a	n/a	Heodo
2020-10-30	i51CI.exe	exe	3b3fa17bb819753f96405165411fd49e876518d6ae6ecd25b293b9120ca16c4e	44.44%	Heodo
2020-10-30	YpRWE.exe	exe	b9b46610c9a3cc308999fdc230b9244a6edd2fed641fac4f4c63ed533c19b41a	n/a	Heodo
2020-10-30	gfBviFqQ.exe	exe	eb5082475338a95e590f450ebcd2da75d6648a69a29dc4ef5f9e29a67242b1d2	n/a	Heodo
2020-10-30	xTSsme14jh3q.exe	exe	7c280bafd0f96ae9a329b2ef7fb2c6a5782d9028dfca8da7a57b68e1ebf2ba09	n/a	Heodo
2020-10-30	PffaZAFBGX.exe	exe	1e46b435213807e624747773887faa2b400b104a0acc564718648c08b59cce0a	40.28%	Heodo
2020-10-30	pAwo0NawYv.exe	exe	c7fce6ea4b171145015493d81b9de62ae5a87981f09ed093af2e3f4a2417e322	n/a	Heodo
2020-10-30	U4cvhBBx3VFe.exe	exe	6204fa6521ca72bfa660b868064382993289eda72d193ca609e1899274a9bd85	n/a	Heodo
2020-10-30	gXLwayW90OoX.exe	exe	52257fe57789fda5c483354556a0d9342ff422cfc78092cead175a5e78c2f75d	31.94%	Heodo
2020-10-30	57v.exe	exe	91b5d6cbc865f955e405d736ffc80b2ef8358e99f80ef5da559b7389f4517de8	n/a	Heodo
2020-10-30	IJv9.exe	exe	9e6f0aeafe227efee9628ff28ff123cf4a81a6f525f26b1ec722cffaed39666f	n/a	Heodo
2020-10-30	CnxFkEF.exe	exe	70b9b2046951178a7388cb1604e495a7e22001ab2f43843e85d0d8f2629afa2e	n/a	Heodo
2020-10-30	fmE5wVM8NIJsu66AB.exe	exe	dec3ba78c07d0af4be805429022edca71751127985c014d69262ee8220de49bd	25.00%	Heodo
2020-10-30	iAVp7f47bKXDc.exe	exe	d19cb2f2556af9104afc1b50623e3902d057af2cd58afdd8f9db5e341834ec96	n/a	Heodo
2020-10-30	hlfv8ABaE4RZr08mEQ.exe	exe	062bec4f4e7aca9b24b97042708c9165fde79653c17e14711e99886f5783ae6d	n/a	Heodo
2020-10-29	lEwQeaODwUc.exe	exe	d06ffbcfc05fc158b3d6d1ad422d59af6bbdb74956dcb3b50d23d35fd3fe722b	n/a	Heodo
2020-10-29	s.exe	exe	da6ecdf45892f9bef6d92af958564278d56c28fe60d79f3393643edfd19c52f7	n/a	Heodo
2020-10-29	UZN6RO1.exe	exe	b70bd8fd84233cc79b5dd3b142c7597e4fdb25648bab345012502577ebb74675	n/a	Heodo
2020-10-29	Oge6nLVRnASx.exe	exe	46a8b1199a06d213536b6f8f454d3379deb22d5e86c5368a898ba85180d00915	22.22%	Heodo
2020-10-29	4WtsgcKp4F6M.exe	exe	1247588addb43fbc95c39b5aeb05046f521545115a5fb7c137f099b7be570de9	22.22%	Heodo
2020-10-29	8u1QZgQqPnQnR6g.exe	exe	7024166f1eb3fdc635bfadffec03f671dbde0b91d8077bfb69c16141b2f2f903	n/a	Heodo
2020-10-29	ZbYNUVjXN.exe	exe	353559990d648d7615446285d98e9c0168b667bca2edc947ba693a3f2decd9ea	n/a	Heodo
2020-10-29	ZOsyaAhnb.exe	exe	b86736f2224c104f52dc80c491dbca5fbe7cec771ad5bb79081056eae483370e	19.72%	Heodo
2020-10-29	HS9kH5EYN39hWAWJv7.exe	exe	e0584807efad555276479599763ac39df46efc2efadcbf0d1925b828e18e34eb	21.13%	Heodo
2020-10-29	DssRjhpd2Kru.exe	exe	c61700a004db7442ffb2e6ef3e410a46dde5250e48d832118e131d5f29e5a746	n/a	Heodo
2020-10-29	VoG.exe	exe	eef526e3e8741697f5d23743e146db670d40dcb36d4f62ad04f2eaf68980df5c	n/a	Heodo
2020-10-29	54WXWN4VDN4UTe8aE.exe	exe	b91b9668eed95c3b86a5db9aa1ed38330b64d6b109647820585815517b22e4a7	22.22%	Heodo
2020-10-29	7Ncvedv.exe	exe	20ec91fba8d98065b3fbea68c2fa7c4b70e686db095da531edf90d599a3f0130	22.22%	Heodo
2020-10-29	hV.exe	exe	b91c7d51aa13c1ea88aef8e590e2945ed960f5f6240bd782379cc3a3efa701a8	n/a	Heodo
2020-10-29	qrx.exe	exe	894d45ab9c54a594d9f256d5f83ec1753990dbc58f672d9166de9c8823ac31f2	20.83%	Heodo
2020-10-29	59DBDKIh.exe	exe	d07841404275c0372222ef50ba31f375420cb69cc0315e4cdfde86327144477c	n/a	Heodo
2020-10-29	mEziOR.exe	exe	a363eec9b68c7195df966f690d898006bd69d2dce50344981449d7b6cd8f2719	22.54%	Heodo
2020-10-29	fGvMn.exe	exe	2a99445ba407d14ceeaad733bd9ecda68e5ec7b43a2fa2febe7c2003e0d00f10	n/a	Heodo
2020-10-29	PBseEbJTHOlmhnHD.exe	exe	117ce99bbc3ceace9e94ea36b197daa8829a2aa2633abe7cc22119f5e5de3c42	n/a	Heodo