VM

Requirements on guest:
mitmproxy
proxychains
socat
iptables
remote server (router) running tor

Host:  vboxnet0 x.x.0.1
Guest: host-only x.x.0.2

Remote tor server:
/etc/tor/torrc
VirtualAddrNetworkIPv4 10.192.0.0/10
AutoMapHostsOnResolve 1
SocksPort 127.0.0.1:9050
SocksPort tor_server_ip:9050
TransPort 127.0.0.1:9040
TransPort tor_server_ip:9040
DNSPort 127.0.0.1:9053
DNSPort tor_server_ip:9053
SocksPolicy accept guest_ip_range/24
ControlPort 9051
DisableDebuggerAttachment 0

On guest
/etc/proxychains.conf:
strict_chain
proxy_dns
tcp_read_time_out 15000
tcp_connect_time_out 8000
[ProxyList]
socks4 	tor_server_ip 9050

run mitmproxy once, look for and import certs from ~/.mitmproxy

on the host create these:

malwaretor script:
########################
#!/bin/bash
#turn on ipforward and ip dynaddr
echo "1" > /proc/sys/net/ipv4/ip_forward
echo "1" > /proc/sys/net/ipv4/ip_dynaddr
echo "1" > /proc/sys/net/ipv4/tcp_syncookies

/sbin/iptables -F
/sbin/iptables -F -t nat
/sbin/iptables -X
/sbin/iptables -P FORWARD ACCEPT
/sbin/iptables -F FORWARD
/sbin/iptables -A INPUT -i lo -j ACCEPT

/sbin/iptables -t nat -A PREROUTING -i vboxnet0 -s x.x.0.2 -p tcp -j REDIRECT --to-port 8889
/sbin/iptables -t nat -A PREROUTING -i vboxnet0 -s x.x.0.2 -p udp -j REDIRECT --to-port 5002

/usr/bin/socat UDP-LISTEN:5002,fork UDP:tor_server_ip:9053 &
/usr/bin/proxychains /mitmproxy/mitmdump --insecure -T -b x.x.0.1 -p 8889 --cert *=~/.mitmproxy/mitmproxy-ca-cert.pem -w <where_to_save_file>/mitm.dump
########################

when finished ctrl+c then reset and kill socat script:
########################
#!/bin/bash
/sbin/iptables -F
/sbin/iptables -F -t nat
/sbin/iptables -X
/sbin/iptables -P FORWARD ACCEPT
/sbin/iptables -F FORWARD
/sbin/iptables -A INPUT -i lo -j ACCEPT

killall socat
#######################