Sorry, there is not a command to send raw LoRa packets in the AT firmware or libmDot libraries.
Closest thing would be to set in MANUAL mode
AT+NJM=0
The ADDR can be set with
AT+NA=00112233
Uplink counter can be adjusted with
AT+ULC=1
And disable encryption of the payload
AT+ENC=0
The header and MIC will still be in the packet