If it doesn't have any self-replication code, then how can did DrWeb get a copy? Did somebody drop in on a Tor hacking forum, or is it being distributed through a separate system, or did they just make it up for marketing, or what?

(The last point is not to discount the plausibility of this. If malware authors are using Lua nowadays, Rust is nothing to them.)