I had thought about trying something similar. The only good solution I could come up with is to remove the package tray cover and suspend some bolts from the top using some large washers to distribute the weight, and then bolt the sub box to the screws. I just wasn't sure of how much weight it could handle.
