I always assumed malware like this would bring its own model and do inference itself. When malware adopts new technology I'm always a little surprised by how "lazy"/brazen the authors are with it.

Here's one using gpt-oss:20b - https://x.com/esetresearch/status/1960365364300087724

If they were not lazy, they've might as well gotten a normal job