Researchers can’t tell if the malware was used in a campaign, or North Korean operatives were caught before they could deploy it in the wild.