Try reading the instructions here: https://btcrecover.readthedocs.io/en/latest/Extract_Scripts/#blockchaincom-second-passwords

You basically just run btcrecover with the --data-extract option instead of the --wallet option and specify all the other options (tokenlist, typos etc)... refer: https://btcrecover.readthedocs.io/en/latest/TUTORIAL/ for instructions on the various options you can use for trying to bruteforce the password... when prompted, input the second password "hash" that was extracted and the script will then attempt to bruteforce the password.

There is a blockchain.com specific example here: https://btcrecover.readthedocs.io/en/latest/Usage_Examples/2020-05-08_Recovering_Blockchain_Wallet_Passwords/Example_Recovering_Blockchain_Wallet_Passwords/

and a youtube tutorial here: https://www.youtube.com/watch?v=eS0VUl3w69Y&list=PL7rfJxwogDzmd1IanPrmlTg3ewAIq-BZJ&index=11