This would be fine for basic malware but the most exciting stuff (what is most likely to be of interest to an analyst) is more likely to contain VM-escape exploits and strategies.

That's smart, I'd probably just play with it on my computer, since testing code in production is my life's motto.