The File Integrity Monitoring system detected the installation of the Pirpi backdoor, which is known to be used by APT3 to maintain persistent access to compromised systems. The malware was installed after successful execution, allowing the attacker to establish a foothold within the network.