LAB INFRASTRUCTURE
Malware Lab & Hypervisor Isolation Guard
Isolated VM sandboxes (Windows 10 FLARE-VM & REMnux Linux), host-only virtual networking, INetSim fake Internet services, and automatic snapshot revert.
Host-Only Airgap
ENFORCEDNo Production Egress
Default gateway routes to REMnux gateway at 192.168.195.139. All WAN packets dropped.
INetSim Fake Services
LISTENINGDNS / HTTP / HTTPS / SMTP
Simulates live Internet services to capture malware beaconing payloads safely.
Clean Snapshot
READY (v4.0.1)Pre-Detonation State
Rolls back registry, memory state, and disk changes in < 2 seconds after analysis.
Configured Hypervisor Sandboxes
| VM Name | OS / Tooling | IP Address | Role | Active Tools | Status |
|---|---|---|---|---|---|
| FLARE-VM-01 | Windows 10 x64 Enterprise | 192.168.195.140 | Target Detonation & Reverse Engineering | PEStudio, x32dbg, Cutter, Procmon, Wireshark, dnSpy | ACTIVE • ISOLATED |
| REMNUX-GATEWAY | REMnux v7 (Ubuntu 20.04) | 192.168.195.139 | Network Simulation & Linux Analysis | INetSim, Wireshark, OLEdump, scdbg, radare2, FLOSS | ACTIVE • LISTENING |
| MOBSF-ANDROID | Android 11 x86 Emulator | 192.168.195.145 | Mobile Malware Triage | MobSF, Frida, Objection, ADB Daemon | STANDBY |