A separate computer would also be good because some malware won't run in a VM since the developer knows it's probably getting analyzed.