helpu.yaml

Name: HelpU
Description: HelpU is a remote monitoring and management (RMM) tool. More information
  will be added as it becomes available.
Author: ''
Created: ''
LastModified: 2/8/2024
Details:
  Website: ''
  PEMetadata:
    Filename: ''
    OriginalFileName: ''
    Description: ''
  Privileges: ''
  Free: ''
  Verification: ''
  SupportedOS: []
  Capabilities: []
  Vulnerabilities: []
  InstallationPaths:
  - helpu_install.exe
  - HelpuUpdater.exe
  - HelpuManager.exe
Artifacts:
  Disk: []
  EventLog: []
  Registry: []
  Network:
  - Description: Known remote domains
    Domains:
    - helpu.co.kr
    - '*.helpu.co.kr'
    Ports: []
Detections:
- Sigma: https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/helpu_network_sigma.yml
  Description: Detects potential network activity of HelpU RMM tool
- Sigma: https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/helpu_processes_sigma.yml
  Description: Detects potential processes activity of HelpU RMM tool
References:
- https://helpu.co.kr/
Acknowledgement: []