Am I understanding correctly that you want a honeypot that serves malware?