'Wacatac' malware was detected (Agentless)

Hi,

I got this notification on MS Defender for Cloud on 1 of out VMs.

I've removed the file, ran a new scan under https://security.microsoft.com (aka Microsoft Defender) but it still shows as "active", what am I missing here?

Any help would be appreciated.

Thanks.