RAT
Duet Display
Duet Display is a screen sharing and remote desktop software product that ships with RMM capability. The tool includes remote desktop access functionality and is part of the broader itagent product family which features system management and automation functions. Duet Display has been observed being used for remote access capabilities beyond its primary screen-sharing purpose.
Tool overview
- Category
- RAT
- Research authors
- Michael Haag
- Created
- 2026-01-15
- Last modified
- 2026-01-15
- Privileges
- User/SYSTEM
- Free / availability
- Trial Available
- Verification required
- Code-signed
- Supported platforms
Android
Windows
iOS
macOS
Capabilities
Executables & installation paths
- Filename
- duet.exe
- OriginalFileName
- DuetDisp.exe
- Description
- Duet Display executable (observed in threat intelligence)
- Filename
- DuetSetup.exe
- OriginalFileName
- Not recorded
- Description
- Duet Display installer (verified via VirusTotal)
Installation paths
duet.exe
DuetSetup.exe
DuetDisp.exe
FORENSIC EVIDENCE
Network artifacts
- Description
- Known remote domains
- Domains
- *.duetdisplay.com
- rdp.duetdisplay.com
- duetdisplay.com
- *.itagent.com
- itagent.com
- Ports
- 443
References
Acknowledgements
- Person
- Syndikalist
- Handle
- @Syndikalist