0

My goal is to find malware that performs network activities and captures the traffic with Wireshark. I have a Windows 10 laptop host machine and VirtualBox which has virtual Windows 10 machine.

I am scared about the safety of my host machine. How can I be safe for this type of analysis which needs an internet connection? (without internet, static analysis were easy, choose host-only adapter, take snapshots and do analysis) Should I choose "Nat network" or "Nat" or I should configure something else?

Improve this question
9
  • One problem at a time please.
    – schroeder ♦
    Dec 26, 2021 at 16:01
  • Is there a reason why you want a plain VM with an OS and not a malware analysis sandbox designed for this type of research? Cuckoo is the gold standard. There are others.
    – schroeder ♦
    Dec 26, 2021 at 16:02
  • As for samples, there are massive repos out there. Look thru Github.
    – schroeder ♦
    Dec 26, 2021 at 16:04
  • Hello. I need a plain virtual machine with an OS for this task. I have thought about sandbox options but not good for me. I have found some malware on GitHub but now I am not sure as I mentioned about isolation. What can I do please?
    – ArcherPacman
    Dec 26, 2021 at 16:23
  • 1
    @ArcherPacman Why not? You have a tried-and-true method, and you say "it's not good for me", without explaining why.
    – user163495
    Dec 26, 2021 at 16:37

0

Reset to default

Browse other questions tagged .