Installing and Configuring a Private Isolated Custom NetworkĬreating an isolated, controlled network environment when analyzing malware is extremely important due to the level of interaction it gives you with malware. To download REMnux go to and download the Virtual Machine platform of your choice. It has excellent tools for exploring network interactions for behavioral analysis and investigating system-level interactions of malware. The REMnux distro is a Linux distribution based on Ubuntu. The next virtual machine we want to download is REMnux Linux. To download the Microsoft virtual machine go to and download the MSEdge on Windows 10 zip file and select your preferred VM platform, currently I’m using VM Fusion. Microsoft provides a free virtual machine which is intended for testing IE and Edge web browsers. Downloading a Free Windows 10 Installation To set up the virtual machines in this post, I recommend that the Windows 10 virtual machine be set with the minimum requirements of two processor cores with 4GB of RAM and the Linux virtual machine with two processor cores with 2GB of RAM. When running multiple virtual machines, the host operating system will begin slowing down, so it is critical to set each virtual machine’s best requirements to optimize its performance.

learn how to capture network traffic from a Windows 10 virtual machine.build a custom Windows malware environment with SentinelLabs RevCore Tools.set up a virtual private network for communication between virtual machines.download, install and configure a free Windows 10 and a free REMnux Linux virtual machine.In this post, I wanted to share my own experiences and scripts to help ease the workload of setting up a malware environment to explore malicious software. When all system configurations and software installations are complete, you’re able to analyze and investigate malware properly. Building the right malware analysis environment is the first step for every malware researcher.

Download the lab