If it is a bomb, then I'm not sure that IS/ISIS would want to trumpet this from the rooftops.
The way these organisations work, it could have been an affiliate or a cell that worked unauthorised.
Perhaps IS command (such that it is) wouldn't have wanted to rattle Russia's cage quite so hard.