[Bug] Worker cannot be run

[miguelfaldutti87]

Describe the bug
When I try to analyze a file using HybridAnalysis Analyzer I get this error: "errorMessage": "Worker cannot be run",.

To Reproduce
I go to "Analyzers" and select "Run" on HybridAnalysis Analyzer. Then I choose a file and then accept.
I get a pop messages that says that the process started okay and after a couple of seconds I get the error message.

Work environment

• Server OS: Ubuntu 18.04
  Cortex 3.0.1-1
  Elastic4Play 1.11.5
  Play 2.6.23
  Elastic 4s6.5.1
  ElasticSearch clien t6.5.2

[jeromeleonard]

Could you please copy the error message you get in the job history page of Cortex ?
Thanks.

[miguelfaldutti87]

Yes. I get this:

"errorMessage": "Worker cannot be run".

[jeromeleonard]

are you trying to use Docker?
In this case maybe your cortex user in not autorise to access docker.

[miguelfaldutti87]

Nop, I'm running all on the same Virtual Machine. I'm not using docker.

[jeromeleonard]

Please, provide us more details :

• related logs from cortex from /var/log/cortex/application.log
• /opt/Cortex-Analyzers/analyzers/HybridAnalysis/HybridAnalysis_analyzer.py is executable and Cortex user has permissions to do that ?
• try it with this in the Cortex configuration file:

[..]
job {
  timeout = 30 minutes
  runners = [process]
}
## ANALYZERS
# 
[..]
``` 

[dadokkio]

can this issue be related TheHive-Project/Cortex#248 ??

[jeromeleonard]

without reply we close this issue. Please, tell us if the problem still exist and we reopen it.

[niomictomi]

the problem still exist, Please help me !

[saraomd93]

I'm getting this exact same issue. please reply
Error: Worker cannot be run
Non-Docker Deployment mode
Unable to load pymisp properly: cannot import name 'Mapping' from 'collections' (/usr/lib/python3.10/collections/init.py)Traceback (most recent call last): File "/opt/Cortex-Analyzers/analyzers/MISP/misp.py", line 3, in from mispclient import MISPClient, MISPClientError File "/opt/Cortex-Analyzers/analyzers/MISP/mispclient.py", line 2, in import pymisp File "/usr/local/lib/python3.10/dist-packages/pymisp/init.py", line 64, in class ExpandedPyMISP(PyMISP):NameError: name 'PyMISP' is not defined