From a short Research with a Friend found this already:
| FROM | TO | TX | VALUE |
|---|---|---|---|
| 0xc5785b3468a3979c0de1a38d9621157ef09fecea | 0x0afaf3a9ffa45efe52ae4d6483c9a900e0aac64b | https://bscscan.com/tx/0x6235f2f7323e74669321d58c498fcf40b8d3201188b9297ea8c07dbc18046f02 | |
| 0x0afaf3a9ffa45efe52ae4d6483c9a900e0aac64b | 0x975d9bd9928f398c7e01f6ba236816fa558cd94b | https://bscscan.com/tx/0xb0b5eda6f8ed364e54e98c698efc653a7f85d7d03d2b98c42c86ce23ae22e9b4 | |
| 0x975d9bd9928f398c7e01f6ba236816fa558cd94b | 0xa305fab8bda7e1638235b054889b3217441dd645 | https://bscscan.com/tx/0x607c2b9dbc0d88d8c50a0e414c0e078cece052865643d4ddd9b8262c1d6edd4f | 241.732.653 |
| https://bscscan.com/tx/0x9af54928c6896590a85e134851af3cb45b0b958acae675f0f05df8c045b5a474 | 153.676.163 |
Looks like those Adresses are Binance Wallets at the final destination
0x975d9bd9928f398c7e01f6ba236816fa558cd94b
0xa305fab8bda7e1638235b054889b3217441dd645
On of these looks like the Binance Wallet because it's moving funds to Binance Hot Wallet.
Since this is not looking like a Hack but suspicious - i dont realy know if Binance would investigate there.