From what I recall reading, stuxnet itself was found in the wild. Even though it was certainly created for a specific target. That’s how security researchers were able to study it fairly quickly. So the binaries were already out there to pull from other infected systems.

Are you referring to the government of Iran,

or the (possibly Iranian) sec people they handed the flash drives from the parking lot to?