They will not get your host IP. The virtual machine will share an IP address with your host if you have it set up that way but no malware will get onto your host.
NAT is already sufficient at your case, cause the malware will only get the IP address of that VM and not Host itself. That's the good thing where developers care the possible security breach if you tweak the connection type.