This document refers to a feature that was removed after Graph API v2.8.
Graph API Version
v2.10

/similar_malware

From any sample, you can view this edge to see other samples which we believe are related.

For each sample we include a string which describes why we think the samples are similar. There may be more than one reason, separated by 'AND' statements. For example, take a look at /1347342882006837/similar_malware. When you view this edge, you should see something like the following:

{
  "data": [
    {
      "id": "1249032561844941 (https://developers.intern.facebook.com/tools/explorer/1037391886293013?method=GET&path=1347342882006837%2Fsimilar_malware&version=v2.8#)", "description": "ssdeep hash similarity 90 AND Belongs to small malware family 703098883185527 type BARF10" 
    }, 
    {
        "id": "1192390830810535 (https://developers.intern.facebook.com/tools/explorer/1037391886293013?method=GET&path=1347342882006837%2Fsimilar_malware&version=v2.8#)", "description": "ssdeep hash similarity 55 AND Belongs to small malware family 703098883185527 type BARF10"
    }, 
    {
      "id": "1153477541437903 (https://developers.intern.facebook.com/tools/explorer/1037391886293013?method=GET&path=1347342882006837%2Fsimilar_malware&version=v2.8#)", "description": "ssdeep hash similarity 69" },
  ]
}

This block shows three malware samples which we think are similar to the original sample. For each, we provide the ID number of the similar sample and a description as to why we think it's similar.

In the example, all of the samples are similar because they have an ssdeep hash similarity. Two of them are also similar because they belong to a small family; fewer than 10 samples. We provide the ID number of the family and the type of the family.

In addition to these reasons, there are also samples which we feel are similar because they share a number of uncommon indicators; found in fewer than ten samples on the graph. That is, both samples have an edge to an indicator which is not connected to many other samples.