Strange botted wallet?

A friend passed away in 2019 and his family reached out recently as they found some crypto stuff on his laptop.

I was expecting to find some bitcoin and maybe a little ETH if he knew what he was doing. But holy cow he used almost every network imaginable, lotta memecoins worth nothing now. There is $2k in Tether so I'm like alright nice we'll just send that out... but as I deposit a little ETH it gets sucked out immediately. Great, there's some kind of sweeper on it. I can see someone tried to use the account in 2022 and fell for a phishing scam so I assume the private key is compromised. But as I'm looking, there's transactions coming in every day. Hundreds of dollars of ETH in and then swept out immediately? I tried writing a Python script that checks for transactions every 0.1 sec and immediately tries to send it out, but whatever sweeper is on there uses such high gas fees it's sending near $0 ETH sometimes with $10+ fees.

I'm at a loss at what to do, we've got the email and passwords as well but there's no sign of any exchange accs or anything. I pressed login with wallet on coinbase and it popped up an email, I put it in haveibeenpwned and it showed a domino's in india leaked it before.

There's payments incoming from bybit and mercuryo every day but sucked out immediately.

Could use some advice if anyone has any ideas, will not be giving up the private key or approving random dApps so don't even try scammers. His brother mentioned something about a mevbot I'm not even sure where to look for that.