This is a generic detection for RedLine packer. The final payload of it is a MSIL file.

First observed in 2020 and advertised on various cybercriminal forums as a malware-as-a-service (MaaS), RedLine is an information stealer mainly targeting Windows user credentials and cryptocurrency wallets, as well as browser information, FTP connections, game chat launchers, and OS information like system hardware, processes names, time zone, IP address, geolocation information, OS version, and default language.

For information about RedLine and other human-operated malware campaigns, read these blog posts: 

• In hot pursuit of ‘cryware’: Defending hot wallets from attacks
• Token tactics: How to prevent, detect, and respond to cloud token theft
• Ransomware as a service: Understanding the cybercrime gig economy and how to protect yourself