A Windows stealer that deletes itself may sound like a cleanup success, but the real risk is what remains behind: follow-on code that can suppress defenses and push an infected host into mining duty.