Download from Suspicious Dyndns Hosts — Detection Rule

Detects download of certain file types from hosts with dynamic DNS names (selected list)

Read the full analysis on IntelFusions