Nvm, found it.
If someone has a similar problem:
create a new bridge with an internal IP and point the VM's Nic to that bridge. Then enable nat with
"iptables -t nat -A POSTROUTING -s '[internal network/xy]' -o [device with external ip] -j MASQUERADE"