Malware Lab

Grok time ~1 minute

Running a malware lab in VirtualBox is a bit of a pain if you’re new to virtual networks. It’s taken me hours to get this thing working right. I had my webserver working internally on my network (Apache2 on a Debian VM hosted by Win8) but couldn’t get Inetsim to work.


Anyway, here’s my settings now, with no special router configuration since it’s all internal:

  • I created a new Group in VirtualBox consisting of my WinXP and Debian VMs.
  • Each one has network adapter 1 as Bridged over my ethernet/internet NIC and adapter 2 as “NAT Network”. Note that this isn’t just the “NAT” option; it’s the NAT Services thing that’s new to VirtualBox and currently “experimental” according to the documentation
  • I edited the Inetsim conf file (/etc/inetsim/inetsim.conf) for the IP binding and set it to the 192.168.200.* address assigned by VirtualBox.

Voila!

No other configuration would work for some reason even though I could get Apache to serve throughout the network in a few configurations.