Go to : AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Delete the vbs script.
Delete c:\temp\ncat.exe
Kill the ncat process if it is still running.
Most likely Windows Defender. When I ran the bashbunny with this payload, it worked the first time, and then after that Windows defender did not like it.
But that is trivial to get around, just rename some fields and file names and it works fine.