I don't think the attacker tried variations of your password to get into your gmail, their malware most likely got it some other way (keylogger or extracted from saved passwords in browser).