I doubt that any of the ransomware people will use any crypto exchange.

I suspect there is whole network of people that will sell crypto for cash to people who want to buy drugs/other things on the darknet.

Maybe there is a handful of corrupt exchanges but the bigger ones already check where your crypto is coming from.