The repack requests SMS permissions. Once installed, it forwards all your incoming text messages (including 2FA codes and bank OTPs) to the hacker's server.
If the app appears to show a location, it is almost certainly . It may prompt you to input your own Google account credentials (phishing) or display a random coordinate and claim it is the target. Imei Tracker 4.1 App REPACK