It sounds like you are looking for a hypervisor rookit, the blue pill is a good example of this type of rookit.
This is just a type of VM that hides its self from the guest, and it just so happens that it can be used to hide an attacker's activities. You can use this software however you want, you don't have to be an attacker. You can use nmap and ping to debug network problems. A hammer can be used to put in a nail or to break a window.