No experience with ransomware, but from reading on HN it seems they have to have substantial "customer" support teams to help victims actually buy the bitcoins and stuff.

Also drugs, software exploits, anything that sells itself really.