Hi, and thanks for the fast reply!
I have been able to capture unencrypted MAC data packets presented as raw data. I've then tried to send MAC data requests (closest I could find to MAC data) from the Command Console by matching the fields with the captured package. Src address, Dst address, PAN Id etc. The raw data didn't match completely since there probably is a difference between MAC data and MAC data requests but I didn't find any way of just sending raw data as it is.