Ghost419

Ghost419 is a Koran-language trojan first identified in mid-December 2017, however earlier versions data back to July 2017. Ghost419 is used for reconnaissance and contains shared code with Gold Dragon and Brave Prince. It can collect detailed information about the victim's system including content on the user's hard drive.

McAfee provides a technical analysis on Ghost419 here.