This is what you drop on a system after it's compromised for use later, it's a RAT. It gets there via some kind of compromise, either an insecure application,

This is what you drop on a system after it's compromised for use later, it's a RAT. It gets there via some kind of compromise, either an insecure application, some drive-by exploit for some missing patch, owning a sysadmin and pushing it out via ansible/salt/etc.