Xylitol from Malwareup (many of you here such as Ryan, endejan and TKflight know me from there) has been doing several in depth Malware Analyses. They may be a long read but it's quite informative. Here are a few:
Tracking Cyber Crime: Gagarincash AV Affiliate
Tracking Cyber Crime: Inside the FakeAV Business
Spyfail
Tracking Cyber Crime: Gagarincash AV Affiliate
Tracking Cyber Crime: Inside the FakeAV Business
Spyfail