The German national computer emergency response team, CERT Bund, has published an FAQ that provides you with details on the malware and how to verify your system is infected. Please note that some information on how to identify an infection with Ebury is outdated as the attackers have deployed newer versions of the malware since then.
Read more here – https://www.cert-bund.de/ebury-faq