diff --git a/lib/metasploit/framework/password_crackers/hashcat/formatter.rb b/lib/metasploit/framework/password_crackers/hashcat/formatter.rb
index 74352f08b2..87e365ccef 100644
--- a/lib/metasploit/framework/password_crackers/hashcat/formatter.rb
+++ b/lib/metasploit/framework/password_crackers/hashcat/formatter.rb
@@ -70,9 +70,9 @@ def hash_to_hashcat(cred)
          /android-sha1/, /android-samsung-sha1/, /android-md5/,
          /ssha/, /raw-sha512/
       #            md5(crypt), des(crypt), b(crypt), sha256, sha512, xsha, xsha512, PBKDF2-HMAC-SHA512
-      # hash-mode: 500          1500        3200      7400    1800   122   1722       7100
+      # hash-mode: 500         1500        3200      7400    1800    122   1722     7100
       #            mssql, mssql05, mssql12, mysql, mysql-sha1
-      # hash-mode: 131,    132,     1731    200        300
+      # hash-mode: 131,   132,     1731    200     300
       #            mediawiki, phpass, PBKDF2-HMAC-SHA1
       # hash-mode: 3711,      400,    12001
       #            android-sha1
@@ -89,6 +89,10 @@ def hash_to_hashcat(cred)
     when /^mscash2$/
       # hash-mode: 2100
       return cred.private.data.split(':').first
+    when /netntlm(v2)?/
+      #            netntlm, netntlmv2
+      # hash-mode: 5500     5600
+      return cred.private.data
     end
   end
   nil