FrausDNS + INetSim for malware analysis
FrausDNS is a Windows DNS Spoofer designed to capture DNS requests made from malware. it can be found at https://github.com/ChrisM09/FrausDNS/...
INetSim simulates various Internet services.
This demo runs INetSim on Kali VM and FrausDNS on Windows VM. All DNS requests on Windows VM are captured by FrausDNS, which returns DNS responses with the IP address of Kali VM. In this way, "all" network traffic including malware generated traffic on Windows VM is routed to Kali VM so that INetSim will be able to capture the interaction of the malware with the Internet.