The attacker appears to convert their illicitly gained funds around the same time every day.