REvil typically converted Bitcoin ransom proceeds into Monero to make laundering and tracing more difficult.
Explicit Confidence 96% · Jack Rhysider EP 126 Details
“they’re actually pretty good at laundering that money by typically converting it into Monero”