SRAM overflow

And the solution seems to come again with malloc().

Not possible. If you can't fit a statically sized array in SRAM, there is no way to fit an identically sized, dynamically allocated on in SRAM.