Blackhat:buy-an-ad-own-a-browser-botnet
new-attack-leverages-mobile-ad-network-to-deliver-android-malware
more-android-malware-distributed-through-mobile-ad-networks

…

Sandroid:
android-botnet-targets-middle-east-banks/
Symantec (with package name and apk name)
TrendMicro (with behavior)

…

http://theory.stanford.edu/~aiken/moss/

http://dl.acm.org/citation.cfm?id=1999747.1999789

…