Re: "its intentions were revealed by the permissions it seeks (basically, everything)"
The real BatteryBot Pro app has the following permissions:
Read contents of USB storage
Modify or delete contents of USB storage
Run at startup
Control vibration
The free version has the following:
Run at startup
So, the fact that the malicious one tried to get all of the permissions is a big red flag.